Table of Contents

Interface IKeyManager

Namespace
Fdyay.IdentityServer.Services.KeyManagement
Assembly
Fdyay.IdentityServer.Core.dll

Manages the lifecycle of automatically-rotated signing keys.

public interface IKeyManager

Methods

GetAllKeysAsync()

Gets all currently-published keys (for the JWKS and token validation).

Task<IReadOnlyCollection<KeyContainer>> GetAllKeysAsync()

Returns

Task<IReadOnlyCollection<KeyContainer>>

GetCurrentKeysAsync()

Gets the keys currently used for signing — one per configured algorithm — creating or rotating as needed. Duende's GetCurrentKeysAsync.

Task<IReadOnlyCollection<KeyContainer>> GetCurrentKeysAsync()

Returns

Task<IReadOnlyCollection<KeyContainer>>

GetCurrentKeysAsync(CancellationToken)

The keys GetCurrentKeysAsync() answers, waiting for them no longer than the token allows. Duende's.

Task<IReadOnlyCollection<KeyContainer>> GetCurrentKeysAsync(CancellationToken cancellationToken)

Parameters

cancellationToken CancellationToken

Returns

Task<IReadOnlyCollection<KeyContainer>>

Remarks

Duende 8.0.1's arity, as an overload: changing the method above would break every host's key manager. A default interface method answering with GetCurrentKeysAsync(), so a host's key manager written before 0.162.0 keeps compiling and keeps signing — this server's key material service asks this one since 0.162.0. Duende's interface has no default.