Interface ISigningCredentialStore
- Namespace
- Fdyay.IdentityServer.Stores
- Assembly
- Fdyay.IdentityServer.Core.dll
Supplies a signing credential the host owns, rather than one this server generated.
public interface ISigningCredentialStoreRemarks
The alternative to automatic key management, and what KeyManagementOptions.Enabled = false switches
to. A host that keeps its keys somewhere already — a vault, an HSM, a certificate the organisation rotates
on its own schedule — registers one of these and this server stops minting its own.
Separate from ISigningKeyStore, which is not an alternative source at all: that one persists the keys automatic management generates, so it is part of the mechanism this replaces rather than a way out of it.
Methods
GetSigningCredentialsAsync(CancellationToken)
The credential to sign with.
Task<SigningCredentials> GetSigningCredentialsAsync(CancellationToken cancellationToken = default)Parameters
cancellationTokenCancellationToken