From e241ab64a011736bce2f349b01dc0f561a27731d Mon Sep 17 00:00:00 2001
From: maliming <malimings@gmail.com>
Date: Wed, 19 Feb 2025 21:24:53 +0800
Subject: [PATCH] Disable PushedAuthorizationBehavior feature by default.

---
 .../DependencyInjection/AbpOpenIdConnectExtensions.cs          | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/framework/src/Volo.Abp.AspNetCore.Authentication.OpenIdConnect/Microsoft/Extensions/DependencyInjection/AbpOpenIdConnectExtensions.cs b/framework/src/Volo.Abp.AspNetCore.Authentication.OpenIdConnect/Microsoft/Extensions/DependencyInjection/AbpOpenIdConnectExtensions.cs
index f020d032c2..64679752c5 100644
--- a/framework/src/Volo.Abp.AspNetCore.Authentication.OpenIdConnect/Microsoft/Extensions/DependencyInjection/AbpOpenIdConnectExtensions.cs
+++ b/framework/src/Volo.Abp.AspNetCore.Authentication.OpenIdConnect/Microsoft/Extensions/DependencyInjection/AbpOpenIdConnectExtensions.cs
@@ -88,6 +88,9 @@ public static class AbpOpenIdConnectExtensions
                 }
             };
 
+            // The application needs to be granted the `OpenIddictConstants.Permissions.Endpoints.PushedAuthorization` permission to using PAR endpoint.
+            // You can enable it after you have granted the permission.
+            options.PushedAuthorizationBehavior = PushedAuthorizationBehavior.Disable;
             configureOptions?.Invoke(options);
         });
     }