Added a comment

AKlaus · Mar 24, 2024 · f149f87 · f149f87
1 parent 1f5a47f
commit f149f87
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/OpenIdDict.Server/Authorisation/OpenIdDictTokenResolving.cs b/OpenIdDict.Server/Authorisation/OpenIdDictTokenResolving.cs
@@ -87,6 +87,10 @@ public ValidateCodeReferenceTokenHandler(IMemoryCache memoryCache)
         = OpenIddictServerHandlerDescriptor.CreateBuilder<OpenIddictServerEvents.ValidateTokenContext>()
             .AddFilter<RequireDegradedModeEnabled>()
             .UseScopedHandler<ValidateCodeReferenceTokenHandler>()
+            /*
+             * NOTE that the order number below might need to be changed in future OpenIddict versions
+             * The auth code must be resolved cache before `OpenIddict.Server.OpenIddictServerHandlers.ValidateAuthorizationCode`
+             */
             .SetOrder(OpenIddictServerHandlers.Protection.ResolveTokenValidationParameters.Descriptor.Order + 990)
             .SetType(OpenIddictServerHandlerType.BuiltIn)
             .Build();