diff --git a/backend/src/Squidex/Config/Authentication/IdentityServerServices.cs b/backend/src/Squidex/Config/Authentication/IdentityServerServices.cs index a0c802d79..a3bc16203 100644 --- a/backend/src/Squidex/Config/Authentication/IdentityServerServices.cs +++ b/backend/src/Squidex/Config/Authentication/IdentityServerServices.cs @@ -39,15 +39,18 @@ namespace Squidex.Config.Authentication else { authBuilder.AddLocalApi(); - authBuilder.Services.AddOptions() + + authBuilder.Services.AddOptions(IdentityServerConstants.LocalApi.PolicyName) .Configure((options, urlGenerator) => { options.ClaimsIssuer = urlGenerator.BuildUrl(Constants.IdentityServerPrefix, false); + options.ExpectedScope = Constants.ApiScope; }); } authBuilder.AddOpenIdConnect(); + authBuilder.Services.AddOptions(OpenIdConnectDefaults.AuthenticationScheme) .Configure((options, urlGenerator) => {