Activities of "LiSong"

after generating the file and updating the code, should I update any other place? since it's the important certificate file, I am wondering if I have to do more and let the whole system to use it?

do you mean putting openiddict.pfx in the root folder and use it like this? serverBuilder.AddProductionEncryptionAndSigningCertificate( "openiddict.pfx", "your-password", X509KeyStorageFlags.MachineKeySet | X509KeyStorageFlags.EphemeralKeySet);

thx

I manually created the new application here, should I update db migrator, add the application in and run it?

1. maybe it has sth to do with the way I created this new application, do you have an instruction for this?

2. when should we use public client vs confidential client, I am using a react app to connect, should I use public client?

3. what's hybird flow, password flow, etc..

4. what's extension grant types

I have just sent you via email thx

just sent, thanks

thanks, will do. by the way, how can I see the source code for this endpoint: connect/token?

2025-10-10 04:13:58.315 +00:00 [Information] Authorization failed. "These requirements were not met: DenyAnonymousAuthorizationRequirement: Requires an authenticated user."

I am creating a react app and use the SSO, it worked locally, however, the production env gives me this error

{ "error": "invalid_grant", "error_description": "The specified token is invalid.", "error_uri": "https://documentation.openiddict.com/errors/ID2004" }

from Request URL Request Method POST

any suggestions

The email should be unique among all tenants. Selecting a tenant is not a good choice.

-- how to update so that the email will be unique?

I know, but we can't do that, the link will be just: abp.io/account/login