diff --git a/guide/migration/20-to-30.html b/guide/migration/20-to-30.html index c4f6766..19f64ca 100644 --- a/guide/migration/20-to-30.html +++ b/guide/migration/20-to-30.html @@ -174,15 +174,16 @@ the pass-through mode for these endpoints, so that requests can reach your autho { options.UseDataProtection(); }); -
If previously application was using request caching functionality, the new way to toggle request caching feature (previously options.EnableRequestCaching()
) to use OpenIddictServerAspNetCoreBuilder
class methods (divided into explicit methods):
In 3.0, the OpenIddictServerBuilder.EnableRequestCaching()
API - that enabled request caching for both authorization and logout request -
+was replaced by 2 separate methods. If your application depends on request caching, don't forget to enable it when migrating to 3.0:
services.AddOpenIddict()
.AddServer(options =>
{
options.UseAspNetCore()
- .EnableAuthorizationRequestCaching()
- .EnableLogoutRequestCaching();
- })
+ .EnableAuthorizationRequestCaching()
+ .EnableLogoutRequestCaching();
+ });
System.Text.Json
If you use JSON.NET to serialize or deserialize OpenIdConnectMessage
, OpenIdConnectRequest
or OpenIdConnectResponse
instances,
consider moving to System.Text.Json
when migrating to OpenIddict 3.0, as 3.0 no longer includes a built-in JSON.NET JsonConverter
for these types.
ticket.SetScopes()
or ticket.SetResour
+Note
In 3.0, the OpenIddict server ASP.NET Core handler supports authenticating userinfo requests. As such, if you use the pass-through mode
+to handle userinfo requests in your own userinfo MVC action, consider using OpenIddictServerAspNetCoreDefaults.AuthenticationScheme
+instead of OpenIddictValidationAspNetCoreDefaults.AuthenticationScheme
for your userinfo endpoint to avoid duplicate access token validation.
+
Update your application to work with the new scope
format
In OpenIddict 3.0, the format of the scope
claim used in JWT tokens has changed from a JSON array to a single space-separated claim to match
the JWT access token specification. To ensure your authorization policies
diff --git a/manifest.json b/manifest.json
index 3c8b77e..5855a69 100644
--- a/manifest.json
+++ b/manifest.json
@@ -11476,7 +11476,7 @@
"output": {
".html": {
"relative_path": "guide/migration/20-to-30.html",
- "hash": "yqEm8nzGBcc1/9QKfsQ/Vg=="
+ "hash": "u8C7XDs7MEh19Wb8vD83fw=="
}
},
"is_incremental": false,