Interface ISigningKeyProvider

Namespace

NuvTools.Security.Signing

Assembly

NuvTools.Security.dll

Supplies the keys a token issuer signs with, wherever they are kept.

public interface ISigningKeyProvider

Remarks

The contract is neutral on purpose: an issuer depends on this and on SigningCredentials, and the package that knows a particular key store — a vault, a hardware module — implements it. Changing store is changing the registration.

Methods

GetSigningCredentialsAsync(CancellationToken)

Returns the current signing credentials.

Task<IReadOnlyList<SigningCredentials>> GetSigningCredentialsAsync(CancellationToken cancellationToken = default)

Parameters

cancellationToken CancellationToken

Cancels the lookup.

Returns

Task<IReadOnlyList<SigningCredentials>>

The credentials in order of preference: the first is the one to sign with, and every one of them must be published, because tokens signed by the others may still be in use. Never empty.