Merge pull request #22193 from abpframework/PushedAuthorizationBehavior

Disable `PushedAuthorizationBehavior` feature by default.

framework/src/Volo.Abp.AspNetCore.Authentication.OpenIdConnect/Microsoft/Extensions/DependencyInjection/AbpOpenIdConnectExtensions.cs

@@ -88,6 +88,9 @@ public static class AbpOpenIdConnectExtensions
                 }
             };
 
+            // The application needs to be granted the `OpenIddictConstants.Permissions.Endpoints.PushedAuthorization` permission to use the PAR endpoint.
+            // You can enable it after you have granted the `PushedAuthorization` permission.
+            options.PushedAuthorizationBehavior = PushedAuthorizationBehavior.Disable;
             configureOptions?.Invoke(options);
         });
     }