Extensibility Points

APIs

External facing APIs are based upon the work of the awesome GraphQL.NET Project

An example conversion can be found here.

OAuth Token Exchange

draft-ietf-oauth-token-exchange-11

Basically, this describes a process of exchanging one token for another. In our flows, it is exchanging an id_token for an access_token to downstream services. The downstream services are APIs. id_tokens are NEVER to be used as a means to access APIs. id_tokens are ingested into a rules engine that determines what level of access is to be granted, and that results in a brand new access_token being minted. That new access_token is our bearer token.

An example of implementing a custom exchange can be found here