PairwiseSubjectSettings Class
Abblix.Oidc.Server
Abblix.Oidc.Server.Features.UserInfo
PairwiseSubjectSettings Class
Configuration for pairwise subject identifier generation. The salt is a server-side secret that prevents external computation of pairwise identifiers, ensuring that even with knowledge of the user's real subject and the client ID, an attacker cannot derive the pairwise identifier.
public record PairwiseSubjectSettings : System.IEquatable<Abblix.Oidc.Server.Features.UserInfo.PairwiseSubjectSettings>
Inheritance System.Object → PairwiseSubjectSettings
Implements System.IEquatable<PairwiseSubjectSettings>
Properties
PairwiseSubjectSettings.HashAlgorithm Property
The HMAC algorithm used to compute pairwise subject identifiers. Defaults to HMAC-SHA256. Supported algorithms: SHA256, SHA384, SHA512, SHA1.
public System.Security.Cryptography.HashAlgorithmName HashAlgorithm { get; init; }
Property Value
System.Security.Cryptography.HashAlgorithmName
PairwiseSubjectSettings.Salt Property
A base64-encoded cryptographic salt used in HMAC computation for pairwise identifiers. This value MUST be kept secret, generated once, and never changed (changing it would invalidate all existing pairwise identifiers). Minimum recommended length: 32 bytes (256 bits) before encoding.
public string Salt { get; init; }