Skip to main content

SecureHttpFetcherExtensions Class

Abblix.Oidc.Server​

Abblix.Oidc.Server.Features.SecureHttpFetch​

SecureHttpFetcherExtensions Class​

Provides reusable functionality for fetching JSON Web Key Sets (JWKS) from remote URIs with SSRF protection and consistent error handling.

public static class SecureHttpFetcherExtensions

Inheritance System.Object → SecureHttpFetcherExtensions

Methods​

SecureHttpFetcherExtensions.FetchKeysAsync(this ISecureHttpFetcher, Uri, ILogger, string, string) Method​

Fetches JSON Web Keys from a JWKS URI with SSRF protection and optional filtering.

public static System.Collections.Generic.IAsyncEnumerable<Abblix.Jwt.JsonWebKey> FetchKeysAsync(this Abblix.Oidc.Server.Features.SecureHttpFetch.ISecureHttpFetcher secureFetcher, System.Uri jwksUri, Microsoft.Extensions.Logging.ILogger logger, string entityId, string entityType);

Parameters​

secureFetcher ISecureHttpFetcher​

HTTP fetcher with SSRF protection and caching.

jwksUri System.Uri​

The URI to fetch the JWKS from.

logger Microsoft.Extensions.Logging.ILogger​

Logger for recording fetch operations and errors.

entityId System.String​

The identifier of the entity (client ID or issuer) for logging.

entityType System.String​

The type of entity (e.g., "client" or "issuer") for logging.

Returns​

System.Collections.Generic.IAsyncEnumerable<JsonWebKey>
An async enumerable of JSON Web Keys from the JWKS endpoint. Returns empty if fetching fails or the JWKS is invalid.