IdenityServer: API resources and scopes

user_457140 0
Viewed 194

My understanding is that a Client is allowed to access ome or more ApiScope and an ApiScop is linked to many ApiResources the names of which become the values of the audience claims.

I.e., 1 client -> many API scopes and 1 API scope -> many API resources

However, people talk about ApiResources having ApiScopes (not scopes having resources) which does not seem to be how the model works.

How is it supposed to work? Is there any documentation?

identityserver4
1 Answers

When you define an ApiResource, you add what ApiScopes it belongs to.

Like in this code, where Scopes below is tied to two ApiScopes.

var invoiceApi = new ApiResource()
{
    Name = "invoiceapi",
    Description = "This is the invoice Api-resource description",
    Enabled = true,
    DisplayName = "Invoice API Service",
    Scopes = new List<string> { "invoice", "manager" },
};

Also, do see my answer here:

ApiResource vs ApiScope vs IdentityResource

Andy_684900
Related