当前版本
概览 (Overview)
- 整体概况 (The big Picture)
- 高级特性 (High level Features)
- 术语 (Terminology)
- 特性和规范 (Features and Specifications)
- 包 (Packaging)
- 起步：创建最简单的 OAuth2 授权服务器，客户端和 API (Getting Started: Creating the simplest OAuth2 Authorization Server, Client and API)
- 起步：MVC 认证 & Web API (Getting Started: MVC Authentication & Web APIs)
- 起步：JS 认证 & Web API (Getting Started: JS Authentication & Web APIs)
配置 (Configuration)
- 概览 (Overview)
- 选项 (Options)
- 服务工厂 (Service Factory)
- In-Memory 服务和仓储 (In-Memory Services and Stores)
- 客户端 (Clients)
- 域和声明 (Scopes and Claims)
- Secret (Secrets)
- 密钥，签名和加密 (Keys, Signatures and Cryptography)
- 认证选项 (Authentication Options)
- Identity Providers
- HSTS
- CORS
- Logging
- 事件 (Events)
端点 (Endpoints)
- 授权/验证 (Authorization/Authentication)
- Token
- 用户信息 (UserInfo)
- Discovery
- 登出 (Logout)
- Token 撤销 (Token Revocation)
- Token 自省 (Token Introspection)
- Access Token 的验证 (Access Token Validation)
- Identity Token 的验证 (Identity Token Validation)
- CSP 错误报告 (CSP Error Report)
Advanced
- Refresh Token (Refresh Tokens)
- 注册服务 (Registering Services)
- 服务的依赖注入 (DI for Services)
- Caching for client, scope, and user stores
- Customizing Views
- Localizing messages
- CSP
- User Service
- OWIN environment extension methods
- Deployment
- 使用 X.509 证书验证客户端 (Authenticating Clients with X.509 Certificates)
- Custom Grant Types
- 登出 (Signout)
- Federated Signout
- Federated post-logout redirects
- 作废当前登录会话 (Invalidating existing login sessions)
使用 Token (Consuming Tokens)
- Katana Access Token 验证中间件 (The Katana Access Token Validation Middleware)
- 选项 (Options)
- 诊断 (Diagnostics)