Change dynamically UserService about identityserver3.samples

[brockallen]

Can you elaborate with a concrete example of what you need to do when the scopes are different values?

[sercangurbuz]

Well,Story is like that.There are currently working in-house asp.net projects using forms authentication whose users are authorized on their own user tables seperately.We have started to develop mobile versions (phonegap) of those asp.net projects which will be available on the internet obviously and decided to use idenitiy server and MembershipReboot for authorization and authentication processes.However first leg of this process is to authenticate the users consuming their own webapi's of seperate projects including "Authorize action" since there is no common user table or repository.
Perhaps the second leg will be to gather up all users of all projects into one common user tables then use it for all authorization consumptions.It will be much more easy way to do ı think :)
Let's say,token request is like that
https://localhost:44301/identity/connect/token/grant_type=password&username=bob&password=secret&response_type=token&client_id=roclient&client_secret=secret&scope=ynl offline_access

Scope value "ynl" is resource name which means its a one of the asp.net projects name.What i want to do is to make a request to ynl webapi to validate the client.

Thats the story.By the way your projects and your efforts are really amazing.:)

[leastprivilege]

The token endpoint allows for extensibility - you can use so called custom grant types and take over the validation process. Check the samples repo for the two custom grant types solutions.

[sercangurbuz]

Using custom grant flow,is it possible to return error_descripton to client.As 'public async Task ValidateAsync(ValidatedTokenRequest request)' returns ClaimsPrincipal,it seemed returning null will be the only way when invalid authz attempts.