Namespace Fdyay.IdentityServer.Services.KeyManagement
Classes
- ClientConfigurationValidator
DefaultClientConfigurationValidator, and an access token may not outlive the signing key that signs it.
- DataProtectionKeyProtector
Protects signing key material at rest using ASP.NET Core Data Protection.
- EcKeyContainer
An EC signing key on the curve its algorithm names — ES256 P-256, ES384 P-384, ES512 P-521. Duende's
EcKeyContainer.
- KeyContainer
A managed signing key and its metadata, whatever kind of key it is. Duende's
KeyContainer.
- KeyManager
Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.
- KeyMaterialService
Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.
- PublicJsonWebKey
Reduces a signing key to the public JWK that can be published in the JWKS.
- RsaKeyContainer
An RSA signing key plus its metadata. Holds RSAParameters (a value type) so the container itself owns no unmanaged resources; RSA instances are created on demand by RsaSecurityKey, which owns and disposes them.
- SecurityKeyInfo
A validation key together with the algorithm it is used with.
- X509KeyContainer
An RSA signing key wrapped in a self-signed certificate, for a relying party that wants
x5c. Duende'sX509KeyContainer, measured: subjectCN=the issuer, SHA-256 with PKCS#1 padding, digital signature key usage and the server-authentication extended usage, valid from the key's creation for its retirement age.
Interfaces
- IKeyManager
Manages the lifecycle of automatically-rotated signing keys.
- IKeyMaterialService
Provides signing credentials and validation keys to the token pipeline and JWKS.
- ISigningKeyProtector
Converts key containers to and from their persisted, protected form.