「应用安全」OAuth和OpenID Connect的全面比较(36)

//////////////////////////////////////////////////////////

// check scope vs response_type plausability

//////////////////////////////////////////////////////////

var requirement =

Constants.ResponseTypeToScopeRequirement[request.ResponseType
;

if (requirement == Constants.ScopeRequirement.Identity

requirement == Constants.ScopeRequirement.IdentityOnly)

{

if (request.IsOpenIdRequest == false)

{

LogError(\"response_type requires the openid scope\" request);

return Invalid(request ErrorTypes.Client);

推荐阅读