Early Preview

This is currently very much a preview. Please feel free to try things out, but don't be upset if anything is not yet working. Feedback is welcome over on our GitHub Dicussions page.

interface Duende.​IdentityServer.​ResponseHandling.​IDiscoveryResponseGenerator

Assembly: Duende.IdentityServer

Generates the responses for the OpenID Connect discovery endpoint ( <c>/.well-known/openid-configuration</c> ) and the JSON Web Key Set endpoint ( <c>/.well-known/openid-configuration/jwks</c> ). The discovery document advertises the server's capabilities, supported grant types, endpoints, and signing algorithms. The JWK document exposes the public keys used to verify tokens issued by this server.

Remarks

The default implementation builds the discovery document from the configured <see cref="T:Duende.IdentityServer.Configuration.IdentityServerOptions" /> , registered resources, and available signing credentials. Override this interface or extend the default implementation to add custom claims or metadata to the discovery document, for example to advertise proprietary extensions.

Methods

CreateDiscoveryDocumentAsync​(string baseUrl, string issuerUri, System.​Threading.​CancellationToken ct)
Creates the OpenID Connect discovery document that describes this server's endpoints, supported grant types, response types, scopes, and other capabilities.
Returns A dictionary of discovery document entries that will be serialized as JSON and returned from the <c>/.well-known/openid-configuration</c> endpoint.
baseUrl The base URL of the IdentityServer instance.
issuerUri The issuer URI that identifies this authorization server.
ct The cancellation token.
CreateJwkDocumentAsync​(System.​Threading.​CancellationToken ct)
Creates the JSON Web Key Set document that exposes the public signing keys used by this server to sign tokens.
Returns A read-only collection of <see cref="T:Duende.IdentityServer.Models.JsonWebKey" /> objects representing the server's active public signing keys, returned from the JWKS endpoint.
ct The cancellation token.