Class KeyVaultSigningServiceCollectionExtensions

Namespace: NuvTools.Security.Signing.Azure.Extensions

Assembly: NuvTools.Security.Signing.Azure.dll

Extension methods for registering the Azure Key Vault signing keys.

public static class KeyVaultSigningServiceCollectionExtensions

Inheritance: object

KeyVaultSigningServiceCollectionExtensions

Inherited Members: object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.MemberwiseClone()

object.ReferenceEquals(object, object)

object.ToString()

Methods

AddKeyVaultSigningKeys(IServiceCollection, IConfiguration, string, TokenCredential?)

Binds KeyVaultSigningOptions from configuration and registers Azure Key Vault as the ISigningKeyProvider.

public static IServiceCollection AddKeyVaultSigningKeys(this IServiceCollection services, IConfiguration configuration, string sectionName = "KeyVaultSigning", TokenCredential? credential = null)

Parameters

services IServiceCollection: The service collection to add the services to.
configuration IConfiguration: Configuration holding the signing section.
sectionName string: Name of the section to bind. Defaults to SectionName; pass the application's own when its settings already live under another name.
credential TokenCredential: The identity to reach the vault with. Defaults to DefaultAzureCredential, which resolves a managed identity when deployed and the developer's own login on a workstation.

Returns

IServiceCollection: The service collection for chaining.

Remarks

This is the only place a caller names the key store: everything above it depends on ISigningKeyProvider, so changing store is changing this call.