From f218022d76fe34c201dae13a3bbcc115a5b8cf4f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?K=C3=A9vin=20Chalet?= Date: Thu, 13 Sep 2018 14:46:53 +0200 Subject: [PATCH] Update the application permissions document to list the built-in scopes permissions --- configuration/application-permissions.md | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/configuration/application-permissions.md b/configuration/application-permissions.md index f8d2431..438e63e 100644 --- a/configuration/application-permissions.md +++ b/configuration/application-permissions.md @@ -152,6 +152,21 @@ Scope permissions limit the scopes (standard or custom) a client application is > The `openid` and `offline_access` scopes are special-cased by OpenIddict and don't require explicit permissions. +### Supported permissions + +| Scope | Constant | +|:-------:|:------------------------------------------------:| +| address | `OpenIddictConstants.Permissions.Scopes.Address` | +| email | `OpenIddictConstants.Permissions.Scopes.Email` | +| phone | `OpenIddictConstants.Permissions.Scopes.Phone` | +| profile | `OpenIddictConstants.Permissions.Scopes.Profile` | +| roles | `OpenIddictConstants.Permissions.Scopes.Roles` | + +To add a custom scope permission, you can use the following pattern: +```csharp +OpenIddictConstants.Permissions.Prefixes.Scope + "custom_scope_name" +``` + ### Example In the following sample, the `angular` client is allowed to request the `address`,