通过IdentityServer4在令牌请求中使用电子邮件

services.AddIdentityServer()
    .AddInMemoryClients(Config.GetClients())
    .AddInMemoryIdentityResources(Config.GetIdentityResources())
    .AddInMemoryApiResources(Config.GetApiResources())
    .AddTestUsers(Config.GetUsers())
    .AddDeveloperSigningCredential()
    .AddExtensionGrantValidator<EmailGrantValidator>();

public class EmailGrantValidator : IExtensionGrantValidator
{
    public string GrantType => "email";

    public async Task ValidateAsync(ExtensionGrantValidationContext context)
    {
        var email = context.Request.Raw.Get("email");

        // 验证电子邮件是否有效
        if (IsValidEmail(email))
        {
            // 生成令牌
            var claims = new List<Claim>
            {
                new Claim(JwtClaimTypes.Subject, email),
                // 添加其他需要的声明
            };

            var identity = new ClaimsIdentity(claims, "email");
            var principal = new ClaimsPrincipal(identity);

            context.Result = new GrantValidationResult(principal);
        }
        else
        {
            context.Result = new GrantValidationResult(TokenRequestErrors.InvalidGrant, "Invalid email");
        }
    }

    private bool IsValidEmail(string email)
    {
        // 验证电子邮件的逻辑
        // 返回true或false
    }
}

new Client
{
    ClientId = "client_id",
    ClientSecrets = { new Secret("client_secret".Sha256()) },
    AllowedGrantTypes = { "email" },
    AllowedScopes = { "openid", "profile", "email" },
    RedirectUris = { "https://example.com/callback" },
    PostLogoutRedirectUris = { "https://example.com/logout" },
    RequireConsent = false
}