Class KeyVaultSigningOptions

Namespace

NuvTools.Security.Signing.Azure

Assembly

NuvTools.Security.Signing.Azure.dll

Where the signing key lives and how its rotation is followed.

public class KeyVaultSigningOptions

Inheritance

object

KeyVaultSigningOptions

Inherited Members

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.MemberwiseClone()

object.ReferenceEquals(object, object)

object.ToString()

Fields

SectionName

The configuration section these options are bound from by default.

public const string SectionName = "KeyVaultSigning"

Field Value

string

Properties

ActivationDelay

How long a new version is published before it starts signing. It gives whoever validates the tokens time to learn the new key, so the first token signed with it is not refused by a validator still holding the previous key set. Defaults to one hour.

public TimeSpan ActivationDelay { get; set; }

Property Value

TimeSpan

KeyName

The name of the RSA key in the vault. Every enabled version of it is used.

public string KeyName { get; set; }

Property Value

string

RefreshInterval

How long the list of versions is reused before the vault is asked again; a rotation is noticed within this time. Defaults to five minutes.

public TimeSpan RefreshInterval { get; set; }

Property Value

TimeSpan

VaultUri

The vault's address, for example https://contoso-kv.vault.azure.net/.

public string VaultUri { get; set; }

Property Value

string