From 5a6417f756ca3421a90827dbab9011ca6015ef7a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?K=C3=A9vin=20Chalet?= Date: Sat, 16 Jan 2021 16:02:58 +0100 Subject: [PATCH] Reword an obsolete comment in AttachApplicationClaims --- .../OpenIddictServerHandlers.Introspection.cs | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/src/OpenIddict.Server/OpenIddictServerHandlers.Introspection.cs b/src/OpenIddict.Server/OpenIddictServerHandlers.Introspection.cs index c583543e..db0312a9 100644 --- a/src/OpenIddict.Server/OpenIddictServerHandlers.Introspection.cs +++ b/src/OpenIddict.Server/OpenIddictServerHandlers.Introspection.cs @@ -963,9 +963,8 @@ namespace OpenIddict.Server return; } - // Only the specified audience (i.e the resource server for an access token - // and the client application for an identity token) can access the sensitive - // application-specific claims contained in the introspected access/identity token. + // Only specified audiences (that were explicitly defined as allowed resources) can access + // the sensitive application-specific claims contained in the introspected access token. if (!context.Principal.HasAudience(context.Request.ClientId)) { context.Logger.LogInformation(SR.GetResourceString(SR.ID6105), context.Request.ClientId);