refactor(RSATokenDescriptor): Die Klasse RSA Token Descriptor wurde erstellt und die Funktionen wurden dorthin verschoben, um eine einfache und saubere Konfiguration zu ermöglichen.

DigitalData.Core.Abstractions/Security/IAsymmetricKey.cs

@@ -10,7 +10,5 @@ namespace DigitalData.Core.Abstractions.Security
         public new string Issuer { get; init; }
 
         public new string Audience { get; init; }
-
-        public SecurityKey SecurityKey { get; }
     }
 }

DigitalData.Core.Abstractions/Security/IAsymmetricPrivateKey.cs

@@ -7,9 +7,5 @@ namespace DigitalData.Core.Abstractions.Security
         public bool IsEncrypted { get; init; }
 
         IAsymmetricPublicKey PublicKey { get; }
-
-        PrivateKeyTokenDescriptor? TokenDescriptor { get; init; }
-        
-        SigningCredentials CreateSigningCredentials(string algorithm = SecurityAlgorithms.RsaSha256, string? digest = null);
     }
 }

DigitalData.Core.Abstractions/Security/IAsymmetricTokenDescriptor.cs

@@ -0,0 +1,13 @@
+using Microsoft.IdentityModel.Tokens;
+
+namespace DigitalData.Core.Abstractions.Security
+{
+    public interface IAsymmetricTokenDescriptor : IAsymmetricPrivateKey, IUniqueSecurityContext
+    {
+        string? ApiRoute { get; }
+
+        SecurityKey SecurityKey { get; }
+
+        SigningCredentials SigningCredentials { get; }
+    }
+}

DigitalData.Core.Security/Config/CryptographParams.cs

@@ -41,6 +41,8 @@ namespace DigitalData.Core.Security.Config
 
         public IEnumerable<RSADecryptor> Decryptors { get; init; } = new List<RSADecryptor>();
 
+        public IEnumerable<RSATokenDescriptor> TokenDescriptors { get; init; } = new List<RSATokenDescriptor>();
+
         public RSADecryptor? VaultDecryptor { get; init; }
 
         public CryptographParams()

DigitalData.Core.Security/Config/MappingProfile.cs

@@ -8,7 +8,7 @@ namespace DigitalData.Core.Security.Config
     {
         public MappingProfile()
         {
-            CreateMap<PrivateKeyTokenDescriptor, SecurityTokenDescriptor>();
+            CreateMap<IAsymmetricTokenDescriptor, SecurityTokenDescriptor>();
         }
     }
 }

DigitalData.Core.Security/Cryptograph.cs

@@ -19,7 +19,7 @@ namespace DigitalData.Core.Security
 
         public IEnumerable<IAsymmetricEncryptor> Encryptors => _lazyEncryptors.Value;
 
-        public IEnumerable<PrivateKeyTokenDescriptor> TokenDescriptions { get; init; } = new List<PrivateKeyTokenDescriptor>();
+        public IEnumerable<IAsymmetricTokenDescriptor> TokenDescriptors { get; init; } = new List<IAsymmetricTokenDescriptor>();
 
         public Cryptograph(IOptions<CryptographParams> options, ILogger<Cryptograph>? logger = null) : base(options)
         {

DigitalData.Core.Security/Extension.cs

@@ -83,7 +83,7 @@ namespace DigitalData.Core.Security
         /// <param name="description">The <see cref="RSATokenDescriptor"/> instance to be mapped.</param>
         /// <returns>A <see cref="SecurityTokenDescriptor"/> instance populated with the mapped values.</returns>
         /// <exception cref="ArgumentNullException">Thrown if <paramref name="mapper"/> or <paramref name="description"/> is <c>null</c>.</exception>
-        internal static SecurityTokenDescriptor Map(this IMapper mapper, PrivateKeyTokenDescriptor description)
+        internal static SecurityTokenDescriptor Map(this IMapper mapper, IAsymmetricTokenDescriptor description)
             => mapper.Map(description, new SecurityTokenDescriptor());
     }
 }

DigitalData.Core.Security/RSAKey/RSAKeyBase.cs

@@ -1,6 +1,5 @@
 using DigitalData.Core.Abstractions.Security;
 using Microsoft.IdentityModel.Tokens;
-using System.Reflection;
 using System.Security.Cryptography;
 
 namespace DigitalData.Core.Security.RSAKey
@@ -14,15 +13,11 @@ namespace DigitalData.Core.Security.RSAKey
         public string Issuer { get; init; } = string.Empty;
 
         public string Audience { get; init; } = string.Empty;
-
+        
-        private readonly Lazy<RsaSecurityKey> _lazyRsaSecurityKey;
-
-        public SecurityKey SecurityKey => _lazyRsaSecurityKey.Value;
-
 #pragma warning disable CS8618 // Non-nullable field must contain a non-null value when exiting constructor. Consider declaring as nullable.
         internal RSAKeyBase()
         {
-            _lazyRsaSecurityKey = new(() => new RsaSecurityKey(RSA));
+            
         }
 #pragma warning restore CS8618 // Non-nullable field must contain a non-null value when exiting constructor. Consider declaring as nullable.
     }

DigitalData.Core.Security/RSAKey/RSAPrivateKey.cs

@@ -28,29 +28,12 @@ namespace DigitalData.Core.Security.RSAKey
 
         public IAsymmetricPublicKey PublicKey => _lazyPublicKey.Value;
 
-        private PrivateKeyTokenDescriptor? _tokenDescriptor;
-
-        private readonly Lazy<PrivateKeyTokenDescriptor?> _descriptorInitiator;
-
-        public PrivateKeyTokenDescriptor? TokenDescriptor { get => _descriptorInitiator.Value; init => _tokenDescriptor = value; }
-
         public RSAPrivateKey()
         {
             _lazyPublicKey = new(() => new RSAPublicKey()
             {
                 Content = RSA.ExportRSAPublicKeyPem()
             });
-
-            _descriptorInitiator = new(() =>
-            {
-                if(_tokenDescriptor is not null)
-                {
-                    _tokenDescriptor.Issuer = Issuer;
-                    _tokenDescriptor.Audience = Audience;
-                    _tokenDescriptor.SigningCredentials = CreateSigningCredentials();
-                }
-                return _tokenDescriptor;
-            });
         }
 
         internal void SetPem(string pem)
@@ -71,8 +54,5 @@ namespace DigitalData.Core.Security.RSAKey
         }
 
         private InvalidOperationException PemIsNullException => new($"Content is null or empty. Issuer: {Issuer}, Audience: {Audience}.");
-
-        public SigningCredentials CreateSigningCredentials(string algorithm = SecurityAlgorithms.RsaSha256, string? digest = null)
-            => digest is null ? new(SecurityKey, algorithm) : new(SecurityKey, algorithm, digest);
     }
 }

DigitalData.Core.Security/RSAKey/RSATokenDescriptor.cs

@@ -1,24 +1,21 @@
-using Microsoft.IdentityModel.Tokens;
+using DigitalData.Core.Abstractions.Security;
+using Microsoft.IdentityModel.Tokens;
+using System.Security.Cryptography;
 
-namespace DigitalData.Core.Abstractions.Security
+namespace DigitalData.Core.Security.RSAKey
 {
     /// <summary>
     /// Contains some information which used to create a security token. Designed to abstract <see cref="SecurityTokenDescriptor"/>
     /// </summary>
-    public class PrivateKeyTokenDescriptor : IUniqueSecurityContext
+    public class RSATokenDescriptor : RSAPrivateKey, IAsymmetricTokenDescriptor
     {
         public string? ApiRoute { get; init; }
 
-        /// <summary>
+        #region SecurityTokenDescriptor Map
-        /// Gets or sets the value of the 'audience' claim.
-        /// </summary>
-#pragma warning disable CS8618 // Non-nullable field must contain a non-null value when exiting constructor. Consider declaring as nullable.
-        public string Audience { get; set; }
-
         /// <summary>
         /// Defines the compression algorithm that will be used to compress the JWT token payload.
         /// </summary>
-        public string CompressionAlgorithm { get; set; }  
+        public string CompressionAlgorithm { get; set; }
 
         /// <summary>
         /// Gets or sets the <see cref="EncryptingCredentials"/> used to create a encrypted security token.
@@ -30,11 +27,6 @@ namespace DigitalData.Core.Abstractions.Security
         /// </summary>
         public DateTime? Expires { get; set; }
 
-        /// <summary>
-        /// Gets or sets the issuer of this <see cref="PrivateKeyTokenDescriptor"/>.
-        /// </summary>
-        public  string Issuer { get; set; }
-
         /// <summary>
         /// Gets or sets the time the security token was issued. This value should be in UTC.
         /// </summary>
@@ -76,19 +68,36 @@ namespace DigitalData.Core.Abstractions.Security
         /// <summary>
         /// Gets or sets the <see cref="SigningCredentials"/> used to create a security token.
         /// </summary>
-        public SigningCredentials SigningCredentials { get; set; }
+        public SigningCredentials SigningCredentials => _lazySigningCredentials.Value;
-#pragma warning restore CS8618 // Non-nullable field must contain a non-null value when exiting constructor. Consider declaring as nullable.
+        #endregion SecurityTokenDescriptor
+
+        private readonly Lazy<RsaSecurityKey> _lazyRsaSecurityKey;
+
+        public SecurityKey SecurityKey => _lazyRsaSecurityKey.Value;
+
+        private readonly Lazy<SigningCredentials> _lazySigningCredentials;
 
         /// <summary>
         /// Specifies the signature algorithm to be applied to the <see cref="SigningCredentials"/>.
         /// Default is <see cref="SecurityAlgorithms.RsaSha256"/>.
         /// </summary>
-        public string SigningAlgorithm { get; internal set; } = SecurityAlgorithms.RsaSha256;
+        public string SigningAlgorithm { get; init; } = SecurityAlgorithms.RsaSha256;
 
         /// <summary>
         /// Optionally specifies the digest algorithm to be applied during the signing process for the <see cref="SigningCredentials"/>.
         /// If not provided, the default algorithm is used.
         /// </summary>
         public string? SigningDigest { get; init; }
+
+#pragma warning disable CS8618 // Non-nullable field must contain a non-null value when exiting constructor. Consider declaring as nullable.
+        public RSATokenDescriptor()
+#pragma warning restore CS8618 // Non-nullable field must contain a non-null value when exiting constructor. Consider declaring as nullable.
+        {
+            _lazyRsaSecurityKey = new(() => new RsaSecurityKey(RSA));
+
+            _lazySigningCredentials = new(() => SigningDigest is null
+                ? new(SecurityKey, SigningAlgorithm)
+                : new(SecurityKey, SigningAlgorithm, SigningDigest));
+        }
     }
-}
+}