Browse Source

Disable PushedAuthorizationBehavior feature by default.

pull/22193/head
maliming 2 years ago
parent
commit
e241ab64a0
No known key found for this signature in database GPG Key ID: A646B9CB645ECEA4
  1. 3
      framework/src/Volo.Abp.AspNetCore.Authentication.OpenIdConnect/Microsoft/Extensions/DependencyInjection/AbpOpenIdConnectExtensions.cs

3
framework/src/Volo.Abp.AspNetCore.Authentication.OpenIdConnect/Microsoft/Extensions/DependencyInjection/AbpOpenIdConnectExtensions.cs

@ -88,6 +88,9 @@ public static class AbpOpenIdConnectExtensions
}
};
// The application needs to be granted the `OpenIddictConstants.Permissions.Endpoints.PushedAuthorization` permission to using PAR endpoint.
// You can enable it after you have granted the permission.
options.PushedAuthorizationBehavior = PushedAuthorizationBehavior.Disable;
configureOptions?.Invoke(options);
});
}

Loading…
Cancel
Save