What are signature credentials in IdentityServer4?

We are implementing Identity Server 4 with our .NET Core web application.

I went through the Identity Server documentation. When setting up the Identity server (using DI), there is a line:

.AddTemporarySigningCredential

I am trying to understand what signature credentials are, but could not understand. Therefore, I do not know if it is normal to use the built-in temporary, or if I have to provide another.

My question is: what are the credentials for signing and how to use it?

In the Identity server documentation, this definition:

Adds a signature key service that provides the specified key material for various token creation / verification services. You can go either to X509Certificate2, SigningCredential or the certificate link from the certificate store.

So it seems important :)

+14
1

. . (, /) . IdentityServer /.well-known/openid-configuration.

, , , ( !). , AddTemporarySigningCredential, .NET Core 1.x.

.NET Core 2.x , AddDeveloperSigningCredential().

, . , : .NET Core ConfigureServices(...) Startup.

, , , , , , .

. , HTTPS . , :

  • AddSigningCredential

    , / . X509Certificate2, SigningCredential, .

+25

Source: https://habr.com/ru/post/1685392/


All Articles