From e0a7d51f176b47cc65cac7ebc0eb643ff32131db Mon Sep 17 00:00:00 2001 From: OpenIddict Bot <32257313+openiddict-bot@users.noreply.github.com> Date: Thu, 13 Sep 2018 12:58:34 +0000 Subject: [PATCH] Update the documentation pages --- configuration/application-permissions.html | 2 +- manifest.json | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/configuration/application-permissions.html b/configuration/application-permissions.html index c700300..cb09e4d 100644 --- a/configuration/application-permissions.html +++ b/configuration/application-permissions.html @@ -82,7 +82,7 @@ called "implicit permissions" it used to determine whether an applicat
If no permission was explicitly attached to the application, it was considered fully trusted and was granted all the permissions. Similarly, if you granted the "token endpoint" permission to an application but NO "grant type" permission, it was assumed the client application was allowed to use the password or client credentials grants.
-Retrospectively, this logic was too complex and it removed in RC3 and application permissions MUST now be explicitly granted.
+Retrospectively, this logic was too complex and was removed in RC3: application permissions MUST now be explicitly granted.