authentication - DotnetOpenAuth RefreshAuthorization 被阻止 403 禁止 (12202)

Question

我有一个 DotnetOpenAuth 授权服务器，它在我的本地主机上运行良好。但是在发布之后我的刷新访问 token 请求被阻止了。

访问 token 的请求，成功

POST https://myurl/identity/oauth/token HTTP/1.1
Authorization: Basic dsjSDLFJKSKLJesww
Content-Type: application/x-www-form-urlencoded; charset=utf-8
User-Agent: DotNetOpenAuth.Core/4.2.1.13026
Host: myhost
Cache-Control: no-store,no-cache
Pragma: no-cache
Content-Length: 86
Expect: 100-continue
Connection: Keep-Alive

username=theusername&password=fancypassword&scope=somescope&grant_type=password

刷新请求:

POST https://myurl/identity/oauth/token HTTP/1.1
Authorization: Basic dsjSDLFJKSKLJesww
Content-Type: application/x-www-form-urlencoded; charset=utf-8
User-Agent: DotNetOpenAuth.Core/4.2.1.13026
Host: myhost
Cache-Control: no-store,no-cache
Pragma: no-cache
Content-Length: 272
Expect: 100-continue

refresh_token=_ttH%21IAAAAGiYhlufAaXURH5P2oDOnPYgJx7YhoR33isvZkPPvlyUgQAAAAHoBYyDMLhq1qwGHHH2uGrLoHZli77XHbCnSFJSKLFJ3kl2j3klj2kljKFSJKLSJKL#$k3ljfsklfjl2

响应:

Technical Information (for support personnel)

Error Code: 403 Forbidden. The server denied the specified Uniform Resource Locator (URL). Contact the server administrator. (12202)

任何帮助、指南、任何方向的指示，都将非常感谢!

我更改了此示例的 url/username/password/scope/base64/refreshtoken。

Answer 1

它们似乎是 TMG Forefront - Authentication Delegation 中的一个设置，它阻止了请求。

Method used by Forefront TMG to authenticate to the published Web server:

1. No delegation, and the client cannot authenticate directly
2. No delegation, but client may authenticate directly

将其更改为 2 后设置为选项 1，请求不再被阻止!