Features and Specifications

IdentityServer implements the following specifications:

• OpenID Connect Core 1.0 (spec)
  • basic, implicit and hybrid flows
• OpenID Connect Discovery 1.0 (spec)
• OpenID Connect Session Management 1.0 - draft 22 (spec)
• OpenID Connect HTTP-based Logout 1.0 - draft 03 (spec)
• OAuth 2.0 (RFC 6749)
  • authorization code, implicit, resource owner password credentials and client credentials grant
• OAuth 2.0 Bearer Token Usage (RFC 6750)
• OAuth 2.0 Multiple Response Types (spec)
• OAuth 2.0 Form Post Response Mode (spec)
• OAuth 2.0 Token Revocation (RFC 7009)
• OAuth 2.0 Token Introspection (RFC 7662) (added in v2.2)
• Proof Key for Code Exchange by OAuth Public Clients (RFC 7636) (added in v2.5)