AuthSettings

Represents the Auth configuration section consumed by ASP.NET JWT Auth. The package binds this record during AddApiAuth, and the JWT bearer setup reads the same section when it configures token validation.

Application code normally does not create AuthSettings manually. Register the package with builder.Configuration, then inject IOptions<AuthSettings> when token-issuing code needs the configured issuer, token lifetime, refresh-token lifetime, or host mapping.

Usage

The JSON shape is documented on the configuration page. The example below shows how application services can consume the already-bound options.

using Microsoft.Extensions.Options;
using AlmightyShogun.AspNet.JwtAuth;

public sealed class TokenIssuer(IOptions<AuthSettings> options)
{
    private readonly AuthSettings _auth = options.Value;

    public DateTimeOffset GetAccessTokenExpiry()
        => DateTimeOffset.UtcNow.AddHours(_auth.Hours);
}

Fields

Issuer: string
Expected JWT issuer value.

Secret: string
Symmetric signing secret used to validate JWT access tokens.

Hours: int
Access-token lifetime in hours.

RefreshTokenDays: int
Refresh-token cookie lifetime in days.

LocalhostApp: string?
Application audience used for localhost requests during development.
Default: null

Hosts: Dictionary<string, string>
Map of request host names to application audience names.
Default: []