public static IEnumerable<ApiResource> GetApis()
{
    return new ApiResource[] 
    {
        new ApiResource("api", "Acme Fireworks Co. payroll")
    };
}

return new Client[]
{
    new Client
    {
        ClientId = "client",
        // no interactive user, use the clientid/secret for authentication
        AllowedGrantTypes = GrantTypes.ClientCredentials,
        // secret for authentication
        ClientSecrets =
        {
            new Secret("secret".Sha256())
        },
        // scopes that client has access to
        AllowedScopes = { "api" }
    }
};

options.Authority = "http://localhost:5000";
options.RequireHttpsMetadata = false;
options.Audience = "api";

public void ConfigureServices(IServiceCollection services)
{
    // uncomment, if you want to add an MVC-based UI
    services.AddMvc().SetCompatibilityVersion(Microsoft.AspNetCore.Mvc.CompatibilityVersion.Version_2_1);

// uncomment if you want to support static files
app.UseStaticFiles();

app.UseIdentityServer();

// uncomment, if you want to add an MVC-based UI
app.UseMvcWithDefaultRoute();

var cors = new DefaultCorsPolicyService(new LoggerFactory().CreateLogger<DefaultCorsPolicyService>())
{
    AllowAll = true
};
services.AddSingleton<ICorsPolicyService>(cors);

return new IdentityResource[]
{
    new IdentityResources.OpenId(),
    new IdentityResources.Profile(),
    new IdentityResources.Email()
};

new Client
  {
      ClientId = "spa",
      ClientName = "Single Page Javascript App",
      AllowedGrantTypes = GrantTypes.Code,
      // Specifies whether this client can request refresh tokens
      AllowOfflineAccess = true,
      RequireClientSecret = false,

      // where to redirect to after login
      RedirectUris = { "http://localhost:8080/callback.html" },

      // where to redirect to after logout
      PostLogoutRedirectUris = { "http://localhost:8080/logout.html" },

      AllowedScopes = new List<string>
      {
          IdentityServerConstants.StandardScopes.OpenId,
          IdentityServerConstants.StandardScopes.Profile,
          IdentityServerConstants.StandardScopes.Email,
          "api"
      }

var builder = services.AddIdentityServer()
    .AddInMemoryIdentityResources(Config.GetIdentityResources())
    .AddInMemoryApiResources(Config.GetApis())
    .AddInMemoryClients(Config.GetClients())
    .AddTestUsers(Config.GetTestUsers());

internal static List<TestUser> GetTestUsers()
{
    return new List<TestUser>
    {
        new TestUser { SubjectId = "1", Username = "alice", Password = "alice",
            Claims =
            {
                new Claim(JwtClaimTypes.Name, "Alice Smith"),
                new Claim(JwtClaimTypes.Email, "[email protected]")
            }
        },
        new TestUser { SubjectId = "11", Username = "bob", Password = "bob",
            Claims =
            {
                new Claim(JwtClaimTypes.Name, "Bob Smith"),
                new Claim(JwtClaimTypes.Email, "[email protected]")
            }
        }
    };
}