Version 5.x has been out of support since December 13, 2022, and this corresponding section of the documentation is no longer maintained. We strongly recommend upgrading to a supported version.

Protecting APIs

Duende IdentityServer issues tokens for accessing resources.

These resources are very often HTTP-based APIs, but could be also other “invokable” functionality like messaging endpoints, gRPC services or even good old XML Web Services. See the issuing tokens section on more information on access tokens and how to request them.