From 10b5ed1977b66fbbe60a68cd09bbad20bb6a4ce4 Mon Sep 17 00:00:00 2001
From: maliming <malimings@gmail.com>
Date: Sat, 2 May 2026 15:39:44 +0800
Subject: [PATCH] Refine XML doc for password/token_exchange default scopes
 options

---
 .../Volo/Abp/OpenIddict/AbpOpenIddictOptions.cs | 17 +++++++++++------
 1 file changed, 11 insertions(+), 6 deletions(-)

diff --git a/modules/openiddict/src/Volo.Abp.OpenIddict.AspNetCore/Volo/Abp/OpenIddict/AbpOpenIddictOptions.cs b/modules/openiddict/src/Volo.Abp.OpenIddict.AspNetCore/Volo/Abp/OpenIddict/AbpOpenIddictOptions.cs
index 9675d7ed6c..f0c2415fb2 100644
--- a/modules/openiddict/src/Volo.Abp.OpenIddict.AspNetCore/Volo/Abp/OpenIddict/AbpOpenIddictOptions.cs
+++ b/modules/openiddict/src/Volo.Abp.OpenIddict.AspNetCore/Volo/Abp/OpenIddict/AbpOpenIddictOptions.cs
@@ -35,17 +35,22 @@ public class AbpOpenIddictAspNetCoreOptions
     public bool UseDefaultScopesForClientCredentials { get; set; }
 
     /// <summary>
-    /// When set to <c>true</c>, the access token issued for the <c>password</c> grant
-    /// automatically includes the scopes configured on the client application (permissions
-    /// prefixed with <c>oi_scp:</c>) when the client does not explicitly request any scope.
+    /// When set to <c>true</c>, the token response for the <c>password</c> grant automatically
+    /// grants the scopes configured on the client application (permissions prefixed with
+    /// <c>oi_scp:</c>) when the client does not explicitly request any scope. If the configured
+    /// scopes include <c>openid</c>/<c>profile</c>/<c>email</c>/<c>roles</c>, the corresponding
+    /// id_token and claim destinations are affected as well.
     /// Default: false.
     /// </summary>
     public bool UseDefaultScopesForPassword { get; set; }
 
     /// <summary>
-    /// When set to <c>true</c>, the access token issued for the <c>urn:ietf:params:oauth:grant-type:token-exchange</c>
-    /// grant automatically includes the scopes configured on the client application (permissions
-    /// prefixed with <c>oi_scp:</c>) when the client does not explicitly request any scope.
+    /// When set to <c>true</c>, the token response for the
+    /// <c>urn:ietf:params:oauth:grant-type:token-exchange</c> grant automatically grants the
+    /// scopes configured on the client application (permissions prefixed with <c>oi_scp:</c>)
+    /// when the client does not explicitly request any scope. If the configured scopes include
+    /// <c>openid</c>/<c>profile</c>/<c>email</c>/<c>roles</c>, the corresponding id_token and
+    /// claim destinations are affected as well.
     /// Default: false.
     /// </summary>
     public bool UseDefaultScopesForTokenExchange { get; set; }