Table of Contents

Namespace Duende.IdentityServer.Services.KeyManagement

Classes

AutomaticKeyManagerKeyStore

Implementation of IValidationKeysStore and ISigningCredentialStore based on KeyManager.

ClientConfigurationValidator

Client configuration validator that ensures access token lifetimes are compatible with the key management options.

DataProtectionKeyProtector

Implementation of IKeyProtector based on ASP.NET Core's data protection feature.

EcKeyContainer

Container class for ECDsaSecurityKey.

FileSystemKeyStore

Implementation of ISigningKeyStore based on file system.

KeyContainer

Container class for key.

KeyManager

Implementation of IKeyManager that creates, stores, and rotates signing keys.

RsaKeyContainer

Container class for RsaSecurityKey.

X509KeyContainer

Container class for X509 keys.

Interfaces

IAutomaticKeyManagerKeyStore

Store abstraction for automatic key management.

IKeyManager

Interface to model loading the keys.

ISigningKeyProtector

Interface to model protecting/unprotecting RsaKeyContainer.

ISigningKeyStoreCache

Interface to model caching keys loaded from key store.