Table of Contents

Class IdentityServerOptions

Namespace
Duende.IdentityServer.Configuration
Assembly
Duende.IdentityServer.dll

The IdentityServerOptions class is the top level container for all configuration settings of IdentityServer.

public class IdentityServerOptions
Inheritance
IdentityServerOptions
Inherited Members

Constructors

IdentityServerOptions()

public IdentityServerOptions()

Properties

AccessTokenJwtType

Gets or sets the value for the JWT typ header for access tokens.

public string AccessTokenJwtType { get; set; }

Property Value

string

The JWT typ value.

Authentication

Gets or sets the authentication options.

public AuthenticationOptions Authentication { get; set; }

Property Value

AuthenticationOptions

The authentication options.

Caching

Gets or sets the caching options.

public CachingOptions Caching { get; set; }

Property Value

CachingOptions

The caching options.

Ciba

Gets or sets the CIBA options.

public CibaOptions Ciba { get; set; }

Property Value

CibaOptions

Cors

Gets or sets the cors options.

public CorsOptions Cors { get; set; }

Property Value

CorsOptions

The cors options.

Csp

Gets or sets the Content Security Policy options.

public CspOptions Csp { get; set; }

Property Value

CspOptions

DPoP

Options for DPoP.

public DPoPOptions DPoP { get; set; }

Property Value

DPoPOptions

DeviceFlow

Gets or sets the device flow options.

public DeviceFlowOptions DeviceFlow { get; set; }

Property Value

DeviceFlowOptions

Discovery

Gets or sets the discovery endpoint configuration.

public DiscoveryOptions Discovery { get; set; }

Property Value

DiscoveryOptions

The discovery endpoint configuration.

DynamicProviders

Options for dynamic external providers.

public DynamicProviderOptions DynamicProviders { get; set; }

Property Value

DynamicProviderOptions

EmitIssuerIdentificationResponseParameter

Specifies whether authorize responses contain the iss parameter (https://www.rfc-editor.org/rfc/rfc9207.html)

public bool EmitIssuerIdentificationResponseParameter { get; set; }

Property Value

bool

EmitScopesAsSpaceDelimitedStringInJwt

Specifies whether scopes in JWTs are emitted as array or string

public bool EmitScopesAsSpaceDelimitedStringInJwt { get; set; }

Property Value

bool

EmitStateHash

Specifies whether the s_hash claim gets emitted in identity tokens. Defaults to false.

public bool EmitStateHash { get; set; }

Property Value

bool

EmitStaticAudienceClaim

Emits an aud claim with the format issuer/resources. That's needed for some older access token validation plumbing. Defaults to false.

public bool EmitStaticAudienceClaim { get; set; }

Property Value

bool

Endpoints

Gets or sets the endpoint configuration.

public EndpointsOptions Endpoints { get; set; }

Property Value

EndpointsOptions

The endpoints configuration.

Events

Gets or sets the events options.

public EventsOptions Events { get; set; }

Property Value

EventsOptions

The events options.

InputLengthRestrictions

Gets or sets the max input length restrictions.

public InputLengthRestrictions InputLengthRestrictions { get; set; }

Property Value

InputLengthRestrictions

The length restrictions.

IssuerUri

Gets or sets the unique name of this server instance, e.g. https://myissuer.com. If not set, the issuer name is inferred from the request

public string? IssuerUri { get; set; }

Property Value

string

Unique name of this server instance, e.g. https://myissuer.com

KeyManagement

Gets or sets the signing key management options.

public KeyManagementOptions KeyManagement { get; set; }

Property Value

KeyManagementOptions

LicenseKey

Gets or sets the license key.

public string? LicenseKey { get; set; }

Property Value

string

Logging

Gets or sets the logging options

public LoggingOptions Logging { get; set; }

Property Value

LoggingOptions

LogoutTokenJwtType

Gets or sets the value for the JWT typ header for logout tokens.

public string LogoutTokenJwtType { get; set; }

Property Value

string

The JWT typ value.

LowerCaseIssuerUri

Set to false to preserve the original casing of the IssuerUri. Defaults to true.

public bool LowerCaseIssuerUri { get; set; }

Property Value

bool

MutualTls

Gets or sets the mutual TLS options.

public MutualTlsOptions MutualTls { get; set; }

Property Value

MutualTlsOptions

PersistentGrants

Options for persisted grants.

public PersistentGrantOptions PersistentGrants { get; set; }

Property Value

PersistentGrantOptions

PushedAuthorization

Options for Pushed Authorization Requests (PAR).

public PushedAuthorizationOptions PushedAuthorization { get; set; }

Property Value

PushedAuthorizationOptions

ServerSideSessions

Options for server-side sessions.

public ServerSideSessionOptions ServerSideSessions { get; set; }

Property Value

ServerSideSessionOptions

StrictJarValidation

Specifies whether the JWT typ and content-type for JWT secured authorization requests is checked according to IETF spec. This might break older OIDC conformant request objects.

public bool StrictJarValidation { get; set; }

Property Value

bool

UserInteraction

Gets or sets the options for the user interaction.

public UserInteractionOptions UserInteraction { get; set; }

Property Value

UserInteractionOptions

The user interaction options.

ValidateTenantOnAuthorization

Specifies if a user's tenant claim is compared to the tenant acr_values parameter value to determine if the login page is displayed. Defaults to false.

public bool ValidateTenantOnAuthorization { get; set; }

Property Value

bool

Validation

Gets or sets the validation options.

public ValidationOptions Validation { get; set; }

Property Value

ValidationOptions