hi
I repeated the test hundreds of times and got no exceptions.
You can continue to observe.
hi
I will do more tests.
hi
is it best practice to add whole process inside custom grant type?
I tend to do this.
then the token and refresh token are accessible at /connect/token?
Yes, Because your access_token is legal.
You can add some simple logic checks in your custom grant type. and then integrate Telegram.
hi
https://github.com/otised-inc/OtisEd.Synergyz/pull/497
Thanks @all
Good news.
ok.
I will check the OtisEd.Synergyz repo.
Thanks
hi
I need an endpoint to post data: auth_data, id, hash and get token to store it in the client storage and making queries to the API using this token based on their permissions. if received data is valid but requester user is not existed in ABP user db then should create it with default role and not be rejected, then generate and send token.
You can add a custom grant type to your project. then create a user if necessary and generate an access token.
This new grant-type endpoint will authenticate your telegram user.
https://community.abp.io/posts/how-to-add-a-custom-grant-type-in-openiddict.-6v0df94z
As a web framework, it's basically request/response. You can use openiddict's custom grant type or add an API controller to handle requests and respond with data. If you wish to generate an openiddict access token, you'd better create a custom grant type