leastprivilege.com
New in IdentityServer4: Multiple allowed Grant Types
In OAuth 2 some grant type combinations are insecure, that’s why we decided for IdentityServer3 that we’ll be defensive and allow only a single grant type per client. During the last tw…