SigningHub Admin API

Make the following changes in the “appsettings.Production.json” file to configure Application Settings for the SigningHub Admin API.

---

To disable Swagger documentation:

"EnableSwaggerDocumentation": "false"

Set the value of the EnableSwaggerDocumentation key to false (default) or omit the key to disable Swagger documentation for security reasons. To enable Swagger documentation, set the value of this key to true.

---

To validate the allowed audience of JWT:

"ValidateAudience": "false"

Set the value of the ValidateAudience key to false (default) to ignore audience validation. To enforce audience validation against the allowed audience of JWT, set the value of this key to true.

---

To enable TLS/SSL authentication:

Make the following change in the “web.config” file for the SigningHub Admin API.

<location path="authenticate/ssl">
    <system.webServer>
        <security>
            <access sslFlags="Ssl, SslRequireCert, SslNegotiateCert" />
        </security>
    </system.webServer>
</location>

For the TLS/SSL authentication, uncomment the above location tag. SigningHub will work as of today and does not allow TLS/SSL authentication when the location tag is commented out.

---