I am not getting useful/appropriate information while using some functionality of ASOS.

[SandeepRasgotra]

I am not getting useful/appropriate information while using some functionality of ASOS.

[SandeepRasgotra]

Point 1 : Got solution by this link https://github.com/aspnet-contrib/AspNet.Security.OpenIdConnect.Server/issues/500.

Point 2: Not able to found. (Basically i want to expire or vanish access and refresh token on logout).
I tried revoke endpoint as well (response is invalid request - details in point 4).

Point 3: This https://github.com/aspnet-contrib/AspNet.Security.OpenIdConnect.Server/issues/532 and https://stackoverflow.com/questions/44844139/asos-token-validation-is-not-working-when-having-separate-authorization-server is working for me.

Point 4. Token Revocation is not working.
I have debug the code and found that it is rejecting the context in OpenIdConnectServerHandler class in below mentioned code.
var context = new ValidateRevocationRequestContext(Context, Scheme, Options, request); await Provider.ValidateRevocationRequest(context);

context.IsRejected is true after above method

The request(post) contains clientId, clientsecret, token as access token or refresh token and token_hint_type. I am not getting to conclusion why this is happening?

Update 1 for Point 4 :
Make context validate by below mentioned code.
public override async Task ValidateRevocationRequest(ValidateRevocationRequestContext context) { context.Validate(); }

Now i got to know by debugging ASOS code that there is no built in logic for token revocation , am i right ? if this is the scenario then i need to write mine custom logic to revoke the token in
public override async Task HandleRevocationRequest(HandleRevocationRequestContext context) {.. code }

Now i am wondering what is the way to revoke the token (access and refresh), because these are self contained and not stored in DB like openiddict( i have looked the revoke logic of this).

Update 2 for Point 4 :

By this https://github.com/aspnet-contrib/AspNet.Security.OpenIdConnect.Server/pull/263 , we as a final developer need to implement this logic.