ABP Commercial (direct references) Volo.Abp.OpenIddict.Pro.* — 10.0.1 (e.g. EntityFrameworkCore, HttpApi, Application, Blazor., Domain.Shared, contracts). Volo.Abp.Account.Pro. — 10.0.1 (auth-server and Blazor packages such as Public.Web.OpenIddict, Admin., Public., Blazor server/WASM, HTTP API, etc.). Those versions are consistent across the projects that reference them (auth-server, identity service, administration service, Blazor).
Underlying OpenIddict (NuGet, transitive) After restore, apps/auth-server/PoweredByArray.AuthServer/obj/project.assets.json resolves the OpenIddict stack at 7.2.0, including packages such as OpenIddict.Core, OpenIddict.Abstractions, OpenIddict.Server, OpenIddict.Server.AspNetCore, OpenIddict.Validation, and related packages — all at 7.2.0.
So in short: ABP OpenIddict Pro / Account Pro = 10.0.1, and the OpenIddict libraries pulled in under that are 7.2.0.
Restarting the (OpenIddict) Auth Server resolves the issue and we can continue normally. This is not sustainable in a production account.