$ show NetDevPack/Security.Jwt
This repository is a .NET library for JWT (JSON Web Token) key management that provides automatic generation and rotation of cryptographic keys for JWT signing (JWS) and encryption (JWE). It features a modular architecture with a core library handling key generation/storage, multiple storage providers (in-memory, file system, Entity Framework Core), and framework-specific integrations for ASP.NET Core and IdentityServer4. The library exposes a JWKS endpoint for sharing public keys and integrates with ASP.NET Core authentication systems to validate tokens using the managed keys. Key entry points include the AddJwksManager() service registration method, UseJwksDiscovery() middleware for the JWKS endpoint, and the IJwtService interface for token generation and validation. The primary data flow involves generating cryptographic keys, storing them via pluggable storage providers, retrieving current keys for token operations, and exposing public keys through the JWKS endpoint. The library depends on System.IdentityModel.Tokens.Jwt for JWT handling, Microsoft.AspNetCore.DataProtection for key protection in the default storage implementation, and various Microsoft.Extensions packages for caching, options, and logging.
The LLM identified 1 files worth highlighting for reuse:
This file implements a file-based storage solution for JWT keys that demonstrates the repository pattern with clean separation of concerns. It stores keys as JSON files in a directory, handles key rotation by maintaining current and previous versions, uses appropriate caching, and implements proper error handling. The component is highly reusable as it depends only on standard .NET interfaces and could be extracted to another project with minimal modification (requiring only the IJsonWebKeyStore interface, KeyMaterial class, and JwtOptions). It demonstrates non-obvious skill in areas like atomic file updates (copy-then-write pattern), cache management, and clean implementation of the storage abstraction.