DiscoveryOptions Class
Abblix.Oidc.Server
Abblix.Oidc.Server.Common.Configuration
DiscoveryOptions Class
Defines discovery endpoint options.
public class DiscoveryOptions
Inheritance System.Object → DiscoveryOptions
Properties
DiscoveryOptions.AcrValuesSupported Property
Optional ACR (Authentication Context Class Reference) values supported by this provider. These values represent authentication assurance levels that can be requested and achieved. If not set, no acr_values_supported will be included in the discovery document.
public System.Collections.Generic.IEnumerable<string>? AcrValuesSupported { get; set; }
Property Value
System.Collections.Generic.IEnumerable<System.String>
DiscoveryOptions.AllowEndpointPathsDiscovery Property
Allows exposing exact paths to OIDC endpoints via discovery manifest.
public bool AllowEndpointPathsDiscovery { get; set; }
Property Value
DiscoveryOptions.MtlsBaseUri Property
RFC 8705: Optional base URI for computing mTLS endpoint aliases automatically. If set, and a specific alias is not provided, discovery will derive the alias by taking the standard endpoint path and applying this base URI (scheme/host/port and optional base path).
public System.Uri? MtlsBaseUri { get; set; }
Property Value
DiscoveryOptions.MtlsEndpointAliases Property
RFC 8705: Optional mTLS endpoint aliases to advertise. Configure with absolute URIs hosted on an mTLS-enabled origin.
public Abblix.Oidc.Server.Common.Configuration.MtlsAliasesOptions? MtlsEndpointAliases { get; set; }
Property Value
DiscoveryOptions.SignedMetadata Property
RFC 8414 §2.1: when enabled, the discovery document additionally carries a
signed_metadata JWS whose payload is the same metadata set, signed with the
authorization server's signing key. This lets relying parties verify the
configuration's origin independently of the TLS layer (relevant behind CDNs, API
gateways, or aggressive caches). Off by default: clients that do not validate the
signature gain nothing from it, and an unconsumed field only adds payload weight.
public bool SignedMetadata { get; set; }