How can I defer setting IdentityServers's SigningCredential

[sanjeev-saxena-us]

Hi

I am on IdentityServer 7.1.1 (.net8)
I have configured a X509 cert in KeyVault which I intend to provide IdentityServer for it to sign issued tokens.
I can do this just fine in in program.cs via AddSigningCredential(cert) during the wireup.
However, I am trying to figure out how I can defer setting the cert via some delegated Action call (retrieval of cert from KeyVault will be moving to a Singleton service, DI'd via builder.Services.AddSingleton<>() which would replace eliminate the explicit AddSigningCredential(cert) call in Program.cs

Any help/working sample code would be appreciated!

[AndersAbel]

AddSigningCredential(cert) ends up in two calls to add services to DI:

builder.Services.AddSingleton<ISigningCredentialStore>(new InMemorySigningCredentialsStore(credential));
builder.Services.AddSingleton<IValidationKeysStore>(new InMemoryValidationKeysStore(new[] { keyInfo }));

If you want to defer loading, you can implement ISigningCredentialStore and IValidationKeysStore in your own classes and register those as singletons.

[sanjeev-saxena-us]

Perfect, thanks @AndersAbel !