Implicit grants are now sort of working on the authorization server side.

Still to do:
 * Ensure no auto-authorize of access tokens based on previous authorizations for the unauthenticated client.
 * Provide the authorization server with a way to indicate access token lifetime, and to veto the request based on the requested scopes being too dangerous for the less secure implicit grant type.

1 files changed, 1 insertions, 1 deletions

diff --git a/projecttemplates/RelyingPartyLogic/OAuthAuthenticationModule.cs b/projecttemplates/RelyingPartyLogic/OAuthAuthenticationModule.cs
index 2c9dc66..130702a 100644
--- a/projecttemplates/RelyingPartyLogic/OAuthAuthenticationModule.cs
+++ b/projecttemplates/RelyingPartyLogic/OAuthAuthenticationModule.cs
@@ -49,7 +49,7 @@ namespace RelyingPartyLogic {
 				return;
 			}
 
-			using (var crypto = OAuthAuthorizationServer.CreateAsymmetricKeyServiceProvider()) {
+			using (var crypto = OAuthResourceServer.CreateRSA()) {
 				var tokenAnalyzer = new SpecialAccessTokenAnalyzer(crypto, crypto);
 				var resourceServer = new ResourceServer(tokenAnalyzer);