diff --git a/src/OpenIddict.Client.WebIntegration/OpenIddictClientWebIntegrationHandlers.cs b/src/OpenIddict.Client.WebIntegration/OpenIddictClientWebIntegrationHandlers.cs index b8a7ec8c..73a4373e 100644 --- a/src/OpenIddict.Client.WebIntegration/OpenIddictClientWebIntegrationHandlers.cs +++ b/src/OpenIddict.Client.WebIntegration/OpenIddictClientWebIntegrationHandlers.cs @@ -641,6 +641,10 @@ public static partial class OpenIddictClientWebIntegrationHandlers context.RequireBackchannelIdentityToken, context.ValidateBackchannelIdentityToken) = context.Registration.ProviderType switch { + // Clever claims the OpenID Connect flavor of the code flow is supported but + // their implementation doesn't always return an id_token from the token endpoint. + ProviderTypes.Clever => (true, false, true), + // While PayPal claims the OpenID Connect flavor of the code flow is supported, // their implementation doesn't return an id_token from the token endpoint. ProviderTypes.PayPal => (false, false, false),