diff --git a/guides/contributing-a-new-web-provider.md b/guides/contributing-a-new-web-provider.md index 428db0f..cd5ffef 100644 --- a/guides/contributing-a-new-web-provider.md +++ b/guides/contributing-a-new-web-provider.md @@ -89,11 +89,29 @@ the OpenIddict client to communicate with the remote authorization server. For i + UserinfoEndpoint="https://oauth.reddit.com/api/v1/me"> + + + ``` +> [!NOTE] +> If the provider doesn't support `grant_type=refresh_token` and only supports the authorization code flow +> (typically with non-expiring access tokens), the `` nodes MUST be removed for clarity, +> as the authorization code flow is always considered supported by default if no `` is present: +> +> ```xml +> +> +> TokenEndpoint="https://www.reddit.com/api/v1/access_token" +> UserinfoEndpoint="https://oauth.reddit.com/api/v1/me" /> +> +> +> ``` + > [!CAUTION] > If the provider doesn't support server metadata but is known to support Proof Key for Code Exchange (PKCE), a `` node MUST > be added under `` to ensure the OpenIddict client will send appropriate `code_challenge`/`code_challenge_method` parameters: