IdentityServer4无效授权代码{“代码”：

Question

我得到无效的授权代码{“代码”："MyTestCode"}，

这里有更详细的错误:无效授权代码{“代码”："MyTestCode"}，详细信息：{"ClientId"："AuthorizationCodeClientFlow"，"ClientName"：“授权代码客户端”，"GrantType"："authorization_code"，"Scopes"：null，"AuthorizationCode"："MyTestCode"，"RefreshToken"：null，"UserName"：null，"AuthenticationContextReferenceClasses"：null，“租户”：null，“IdP”，“原始”：{"grant_type"："authorization_code"，“代码”："MyTestCode"，"redirect_uri"："https://localhost:5000/oauth/callback"，“client_id："AuthorizationCodeClientFlow"}，"$type"："TokenRequestValidationLog"}

我正在用邮递员测试

​

这是从以下代码生成的客户端：

            {
                ClientName = "Authorization Code Client",
                ClientId = "AuthorizationCodeClientFlow",
                AllowedGrantTypes = GrantTypes.Code,
                ClientSecrets =
                  {
                    new Secret("AuthorizationCodeClientFlowSecret".Sha512())
                  },
                AllowedScopes =
                  {
                    "all"
                  },
                RedirectUris =
                  new List<string> {
                       "https://localhost:5000/oauth/callback"
                  },
                AllowOfflineAccess = false,
                AccessTokenLifetime = 60
            };

https://localhost:5105/oauth/authorize工作得很好。我在https://localhost:5105/oauth/token步骤中出错。当我像这样验证请求时：

var form = (await _httpContextAccessor.HttpContext.Request.ReadFormAsync()).AsNameValueCollection();

            var validationResult = await _requestValidator.ValidateRequestAsync(form, clientResult);

            if (validationResult.IsError)
            {
                return new IdpTokenResponse
                {
                    Custom = new Dictionary<string, object>
                      {
                        { "Error", validationResult.Error },
                        { "ErrorDescription", validationResult.ErrorDescription }
                      }
                };
            }

Answer 1

您需要获取从初始身份验证请求中收到的授权代码，然后在从令牌端点获得令牌时将其传递给它。

有一件不相关的事情是，当您针对进行身份验证时，应该始终请求openid范围，All或"“是无效的。