问题
We have a .Net Core Identity Server, a .Net Core Api, our clients however are desktop and mobile apps.
Looking through the docs it seems our Users need to Sign-in using Hybrid flow, however it seems this flow is for Web browser apps.
What is the correct flow/grant_type to Authenticate my Desktop Users and give them access to the Api?
回答1:
Hybrid flow is correct. See this spec:
https://tools.ietf.org/html/draft-ietf-oauth-native-apps-09
You can use this library: https://github.com/IdentityModel/IdentityModel.OidcClient2
and here are some sample: https://github.com/IdentityModel/IdentityModel.OidcClient.Samples
来源：https://stackoverflow.com/questions/43121401/how-to-use-identity-server-4-sign-in-with-desktop-mobile-apps