Table of Contents

Class BuiltInGrantTypes

Namespace
Fdyay.IdentityServer.Validation
Assembly
Fdyay.IdentityServer.Core.dll

The grants this server implements itself, before anything a host adds.

public static class BuiltInGrantTypes
Inheritance
BuiltInGrantTypes
Inherited Members

Remarks

One list rather than one per reader. The token endpoint asks it whether a grant is supported at all, and the discovery document is built from it — so a grant cannot be advertised and then refused, or serviced and never mentioned. Both of those were live before 0.28.0: the document stated four grant names as a literal, and the endpoint decided support with a switch nothing else could see.

Properties

All

Every grant the token endpoint answers without a host-supplied validator.

public static IReadOnlyList<string> All { get; }

Property Value

IReadOnlyList<string>

Remarks

refresh_token is here because a client can present one at the token endpoint, even though it is permitted by AllowOfflineAccess rather than by appearing in AllowedGrantTypes. Whether a grant is supported and whether a given client may use it are two questions, and conflating them is what this release exists to fix.