-
By default NonceCache is null.
It seems reasonable to me if the user set it that should be an indication to use it.
-
The OAuthBearer middleware is not a generic bearer token handler, it only supports JWT's. Consider renaming this one to something more specific (JWTBearer? OAughJWT?) so that we can create a more gene…
-
Will there be documentation on the server? Flow diagrams? Extension interface description?
The ASP.NET 4 AuthorizationServer implementation was quite quirky, having loads of side effects hidden in th…