From 4354006a2777360b00b71bd0d107e91ff3f0c644 Mon Sep 17 00:00:00 2001
From: Kyle Spearrin <kyle.spearrin@gmail.com>
Date: Sat, 28 Jan 2017 02:40:09 -0500
Subject: [PATCH] disable unused endpoints on identity server

---
 src/Api/Startup.cs | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/src/Api/Startup.cs b/src/Api/Startup.cs
index 924625955a..381a40be03 100644
--- a/src/Api/Startup.cs
+++ b/src/Api/Startup.cs
@@ -90,7 +90,15 @@ namespace Bit.Api
             services.AddSingleton<IRateLimitCounterStore, MemoryCacheRateLimitCounterStore>();
 
             // IdentityServer
-            var identityServerBuilder = services.AddIdentityServer()
+            var identityServerBuilder = services.AddIdentityServer(options =>
+            {
+                options.Endpoints.EnableAuthorizeEndpoint = false;
+                options.Endpoints.EnableIntrospectionEndpoint = false;
+                options.Endpoints.EnableEndSessionEndpoint = false;
+                options.Endpoints.EnableUserInfoEndpoint = false;
+                options.Endpoints.EnableCheckSessionEndpoint = false;
+                options.Endpoints.EnableTokenRevocationEndpoint = false;
+            })
                 .AddInMemoryApiResources(ApiResources.GetApiResources())
                 .AddInMemoryClients(Clients.GetClients());