error:invalid_scope - IdentityServer Flow.ClientCredential

Question

我的 IdentityServer3 中有一个客户端

new Client
{
    ClientName = "Client Credentials Flow Client",
    Enabled = true,
    ClientId = "clientcredentials.reference",
    Flow = Flows.ClientCredentials,

    ClientSecrets = new List<Secret>
    {
        new Secret("secret".Sha256()),
    },

    AllowedScopes = new List<string>()
    {
        "read",
        "write"
    }
}

我在本地 IIS 中托管了令牌服务，并尝试使用 Postman ping 令牌，但出现错误 {"error":"invalid_scope"}

Host URL: 
    https://localhost:5775/core/connect/token
Header: 
    Content-Type:application/x-www-form-urlencoded
Body:
    grant_type=client_credentials
    &cliend_id=clientcredentials.reference
    &client_secret=secret

Note: I'm using pure IdentityServer3 package not Thinktecture

Answer 1

检查范围声明

中的范围 "read" 和 "write"

new Scope
{
    Name = "read",
    DisplayName = "Read data",
    Type = ScopeType.Resource,
    Emphasize = false,

    ScopeSecrets = new List<Secret>
    {
        new Secret("secret".Sha256())
    }
},
new Scope
{
    Name = "write",
    DisplayName = "Write data",
    Type = ScopeType.Resource,
    Emphasize = true,

    ScopeSecrets = new List<Secret>
    {
        new Secret("secret".Sha256())
    }
}

我认为它错过了...检查一次...