search

DuendeSoftware / IdentityServer

The most flexible and standards-compliant OpenID Connect and OAuth 2.x framework for ASP.NET Core
https://duendesoftware.com/products/identityserver
Other
1.44k stars 328 forks source link

Don't include PAR in discovery if feature is not enabled in license #1580

Open josephdecock opened 1 month ago

josephdecock commented 1 month ago

Including PAR in the disco doc when the license doesn't allow it can confuse clients that will then attempt to use PAR and fail. E.g., IdentityModel.OidcClient will try to push if the PAR endpoint is present.

brockallen commented 4 days ago

Should this (and many other features) be more license driven, rather than options driven?