IdentityServer4 自检端点

                new Client
                {
                    ClientId = "roclient.reference",
                    ClientSecrets = {new Secret("secret".Sha256())},
                    AllowedGrantTypes = GrantTypes.ResourceOwnerPassword,
                    AllowedScopes = { "resource1.scope1", "resource2.scope1","scope4.scope" },
                    AccessTokenType = AccessTokenType.Reference
                },

        public static readonly IEnumerable<ApiScope> ApiScopes =
            new[]
            {
                new ApiScope("scope4.scope"),　　//标记点1
            };

        public static readonly IEnumerable<ApiResource> ApiResources = 
            new[]
            {
                new ApiResource("scope4.1","test scope4")　　//资源名称【scope4.1】会有用到，标记点3
                {
                    ApiSecrets={ new Secret("secret".Sha256())},　　//资源私钥【secret】，标记点4，这是必需的

                    Scopes={ "scope4.scope" }　　//标记点2，对标记点1
                },
            };

POST /connect/token

参数用：form-data方式
    client_id=roclient.reference&
    client_secret=secret&
    grant_type=password&
    username=bob&
    password=bob

            static IDiscoveryCache _cache = new DiscoveryCache(“认证服务器地址”); //注入端点发现，服务器地址如：http://localhost:8112


　　　　　　  var disco = await _cache.GetAsync();
            if (disco.IsError) throw new Exception(disco.Error);

            var client = new HttpClient();
            var response = await client.RequestPasswordTokenAsync(new PasswordTokenRequest
            {
                Address = disco.TokenEndpoint,
                ClientId = "roclient.reference",
                ClientSecret = "secret",

                UserName = "bob",
                Password = "bob",
                Scope = "scope4.scope"　　//访问范围，可选
            });

            if (response.IsError) throw new Exception(response.Error);
            return response.AccessToken;

POST /connect/introspect
Authorization: Basic xxxyyy

token=<token>　　　　//这里的token就是accessToken

Convert.ToBase64String(Encoding.UTF8.GetBytes(string.Format("{0}:{1}", "scope4.1", "secret")));

            var disco = await _cache.GetAsync();
            if (disco.IsError) throw new Exception(disco.Error);

            var client = new HttpClient();
            var result = await client.IntrospectTokenAsync(new TokenIntrospectionRequest
            {
                Address = disco.IntrospectionEndpoint,

                ClientId = "scope4.1",　　　　//资源名称
                ClientSecret = "secret",　　 //资源私钥
                Token = accessToken
            });

            if (result.IsError)
            {
                Console.WriteLine(result.Error);
            }
            else
            {
                if (result.IsActive)　　//返回看IsActive->true表示有效,false表示无效
                {
                    result.Claims.ToList().ForEach(c => Console.WriteLine("{0}: {1}",
                        c.Type, c.Value));
                }
                else
                {
                    Console.WriteLine("token is not active");
                }
            }