Barry Dorrans

Oh that's not what that option does. OnValidateIdentity is a setting where it goes back to the database and refreshes the identity, if you're setting that to zero it's doing...

Obviously we're aware of the existing community projects, but this work does beyond just the header itself that the linked packages above have with the reporting endpoint to make debugging...

@gaborposz as you rightfully point out we try to keep details as generic as possible, to reduce the risk of immediate exploitation (although of course once we tag the commit...

It's getting replaced soon with a [new library soon](https://azure.microsoft.com/en-us/blog/previewing-azure-sdks-following-new-azure-sdk-api-standards/), so it's probably not worth the investment, however @Petermarcu then needs to assign someone to own and update the docs going...

As you can imagine I'm horribly dubious about making up a payload detection and assumption. Any such feature should be opt-in.

It's not a matter of *should* Heath, it's a matter of does your SDK do that right now, which it appears to do :) If, as you say, your library...

This is expected. You can create an API project with Identity Server as an in app store at the command line, not within the UI

It's only in .NET Core 3 previews. Have you installed that? And there's always a lag before things appear in a VS UI as we, hopefully, get feedback from the...

Oh heck yes, my bad.

Sorry for leading you astray, I should stop triaging issues before coffee :) We've been thinking about it, but getting it into spa templates was the big push for 3.0....