Early Preview
This is currently very much a preview. Please feel free to try things out,
but don't be upset if anything is not yet working. Feedback is welcome over on our
GitHub Dicussions page.
class Duende.IdentityServer.Configuration.KeyManagementOptions
Assembly: Duende.IdentityServer
Inheritance: object → KeyManagementOptions
Options to configure behavior of KeyManager.
Properties
public
bool
Enabled
Specifies if key management should be enabled. Defaults to true.
public
int
RsaKeySize
Key size (in bits) of RSA keys. Defaults to 2048.
SigningAlgorithms
The signing algorithms allowed.
If none are specified, then "RS256" will be used as the default.
The first in the collection will be used as the default.
public
System.TimeSpan
InitializationDuration
When no keys have been created yet, this is the window of time considered to be an initialization
period to allow all servers to synchronize if the keys are being created for the first time.
Defaults to 5 minutes.
public
System.TimeSpan
InitializationSynchronizationDelay
Delay used when re-loading from the store when the initialization period. It allows
other servers more time to write new keys so other servers can include them.
Defaults to 5 seconds.
public
System.TimeSpan
InitializationKeyCacheDuration
Cache duration when within the initialization period.
Defaults to 1 minute.
public
System.TimeSpan
KeyCacheDuration
When in normal operation, duration to cache keys from store.
Defaults to 24 hours.
public
System.TimeSpan
PropagationTime
Time expected to propagate new keys to all servers, and time expected all clients to refresh discovery.
Defaults to 14 days.
public
System.TimeSpan
RotationInterval
Age at which keys will no longer be used for signing, but will still be used in discovery for validation.
Defaults to 90 days.
public
System.TimeSpan
RetentionDuration
Duration for keys to remain in discovery after rotation.
Defaults to 14 days.
public
bool
DeleteRetiredKeys
Automatically delete retired keys.
Defaults to true.
public
bool
DataProtectKeys
Automatically protect keys in the storage using data protection.
Defaults to true.
public
string
KeyPath
Path for storing keys when using the default file system store.
Defaults to the "keys" directory relative to the hosting application.
Methods
public
bool
Equals(object obj)
Inherited from object
protected
void
Finalize()
Inherited from object
public
int
GetHashCode()
Inherited from object
protected
object
MemberwiseClone()
Inherited from object
public
string
ToString()
Inherited from object