AuthorizationServer
AuthorizationServer copied to clipboard
Feature: Configurable Consent Remember Options
I wanted the Consent screen with the code flow for my project, but the options the user can choose for "Offline use" were hard-coded (1 hour, 1 day , ... , Forever)
I don't want the user to create a refresh token that is valid for 50 years ("forever")
I decided to change the implementation and make these options configurable. Similar to scopes, the view where you can edit an application now has an option "Consent remember options". There, you can add your own options or apply the default values
I created a branch in my fork: https://github.com/Excape/Thinktecture.AuthorizationServer/tree/rememberOptions
The commits are e9dadd5 (main) and e75f1f9 (small changes)
I'm leaving this here for consideration, maybe it could somehow be integrated in the code base.
Looks good. I suspect this is a schema change?
Yes it is. I added a new table RememberOptions
and a relation between Applications and RememberOptions
Actually, that's not too bad. Ok, we'll discuss. thanks.