Class BuiltInGrantTypes
- Namespace
- Fdyay.IdentityServer.Validation
- Assembly
- Fdyay.IdentityServer.Core.dll
The grants this server implements itself, before anything a host adds.
public static class BuiltInGrantTypes
- Inheritance
-
BuiltInGrantTypes
- Inherited Members
Remarks
One list rather than one per reader. The token endpoint asks it whether a grant is supported at all, and the
discovery document is built from it — so a grant cannot be advertised and then refused, or serviced and never
mentioned. Both of those were live before 0.28.0: the document stated four grant names as a literal, and the
endpoint decided support with a switch nothing else could see.
Properties
All
Every grant the token endpoint answers without a host-supplied validator.
public static IReadOnlyList<string> All { get; }
Property Value
Remarks
refresh_token is here because a client can present one at the token endpoint, even though it is
permitted by AllowOfflineAccess rather than by appearing in
AllowedGrantTypes. Whether a grant is supported and whether a given client
may use it are two questions, and conflating them is what this release exists to fix.