title: Identity Server 4 - How to Define Supported Grant Types etc
body: <p>In a current ASP.NET Core project  (<code>v2.1.6</code>) Identity Server 4 (<code>v2.2.0</code>) was implemented for user and API authentication and it works like a charm. The only <code>grant_type</code> that is set to the clients is <code>client-credentials</code> and the <code>scopes</code> are set to a few custom scopes where <code>offline_access</code> is <em>not</em> allowed.</p>
  
  <p>After visiting the <code>.well-known/openid-configuration</code> it was found that more <code>grant_types</code> are supported than specified and <code>offline_access</code> is a supported scope even though it was disabled (shortened for brevity):</p>
  
  <pre><code>{
    "scopes_supported": [
      "custom_scope_1",
      "custom_scope_2",
      "offline_access"
    ],
    "grant_types_supported": [
      "authorization_code",
      "client_credentials",
      "refresh_token",
      "implicit",
      "password"
    ],
  }
  </code></pre>
  
  <p>The documentation of both <a href="https://identityserver4.readthedocs.io" rel="nofollow noreferrer">IdentityServer4</a> but could not find a clue how to set such an option. I stumbled upon <a href="https://dbsphinxtest.readthedocs.io/en/latest/start/scopes.html" rel="nofollow noreferrer">an possibly older documentation</a> but this seems not to be part of the current version.</p>
  
  <p>Is there any possibility to explicitly define the supported grant types during configuration which I just missed? Or is it generated automatically and cannot be set at all?</p>