Dominick Baier
Dominick Baier
> Install UI Updates Why? The template comes with the lastest UI. This is also the wrong UI for the ASP.NET Identity template
I'd appreciate a bit more confidence before I merge external code @scottbrady91 ...
By default - a scope can only see its own scope - but there is a setting on the Scope definition (`AllowUnrestrictedIntrospection`) that you can use to change that behavior....
I see the problem. Right now we don't have a solution for that besides defining an additional scope.
There's a flag on the scope - `AllowUnrestrictedIntrospection` - that should fix your problem.
discuss? close? todo?
Sorry - way to busy right now - we will discuss ASAP.
I will tell you once I evaluated it ;) Katana does not have an issue - but other client libraries might.
update https://tools.ietf.org/html/draft-jones-oauth-mix-up-mitigation-01