61 lines
2.2 KiB
C#
61 lines
2.2 KiB
C#
using Microsoft.IdentityModel.Tokens;
|
|
|
|
namespace Core.Cerberos.Adapters.Options
|
|
{
|
|
/// <summary>
|
|
/// JWT token Issuer options (used for JWT Factory)
|
|
/// </summary>
|
|
|
|
[System.Diagnostics.CodeAnalysis.ExcludeFromCodeCoverage]
|
|
public class JwtIssuerOptions
|
|
{
|
|
/// <summary>
|
|
/// 4.1.1. "iss" (Issuer) Claim - The "iss" (issuer) claim identifies the principal that issued the JWT.
|
|
/// </summary>
|
|
public string? Issuer { get; set; }
|
|
|
|
/// <summary>
|
|
/// 4.1.2. "sub" (Subject) Claim - The "sub" (subject) claim identifies the principal that is the subject of the JWT.
|
|
/// </summary>
|
|
public string? Subject { get; set; }
|
|
|
|
/// <summary>
|
|
/// 4.1.3. "aud" (Audience) Claim - The "aud" (audience) claim identifies the recipients that the JWT is intended for.
|
|
/// </summary>
|
|
public string? Audience { get; set; }
|
|
|
|
/// <summary>
|
|
/// 4.1.4. "exp" (Expiration Time) Claim - The "exp" (expiration time) claim identifies the expiration time on or after which the JWT MUST NOT be accepted for processing.
|
|
/// </summary>
|
|
public DateTime Expiration => IssuedAt.Add(ValidFor);
|
|
|
|
/// <summary>
|
|
/// 4.1.5. "nbf" (Not Before) Claim - The "nbf" (not before) claim identifies the time before which the JWT MUST NOT be accepted for processing.
|
|
/// </summary>
|
|
public DateTime NotBefore => DateTime.UtcNow;
|
|
|
|
/// <summary>
|
|
/// 4.1.6. "iat" (Issued At) Claim - The "iat" (issued at) claim identifies the time at which the JWT was issued.
|
|
/// </summary>
|
|
public DateTime IssuedAt => DateTime.UtcNow;
|
|
|
|
/// <summary>
|
|
/// Set the timespan the token will be valid for (default is 120 min)
|
|
/// </summary>
|
|
public TimeSpan ValidFor { get; set; } = TimeSpan.FromMinutes(525601);
|
|
|
|
|
|
|
|
/// <summary>
|
|
/// "jti" (JWT ID) Claim (default ID is a GUID)
|
|
/// </summary>
|
|
public Func<Task<string>> JtiGenerator =>
|
|
() => Task.FromResult(Guid.NewGuid().ToString());
|
|
|
|
/// <summary>
|
|
/// The signing key to use when generating tokens.
|
|
/// </summary>
|
|
public SigningCredentials? SigningCredentials { get; set; }
|
|
}
|
|
}
|