SitecoreIdentityServerExternalClient.xml

<ExternalClient>
   <ClientId>sitecoremvc</ClientId>
   <ClientName>sitecoremvcclient</ClientName>
   <ClientSecrets>
      <ClientSecret1>abracadabra</ClientSecret1>
   </ClientSecrets>
   <AccessTokenType>0</AccessTokenType>
   <AllowOfflineAccess>true</AllowOfflineAccess>
   <AlwaysIncludeUserClaimsInIdToken>false</AlwaysIncludeUserClaimsInIdToken>
   <AccessTokenLifetimeInSeconds>3600</AccessTokenLifetimeInSeconds>
   <IdentityTokenLifetimeInSeconds>3600</IdentityTokenLifetimeInSeconds>
   <AllowAccessTokensViaBrowser>true</AllowAccessTokensViaBrowser>
   <RequireConsent>false</RequireConsent>
   <RequireClientSecret>true</RequireClientSecret>
   <AllowedGrantTypes>
      <AllowedGrantType1>hybrid</AllowedGrantType1>
      <AllowedGrantType2>client_credentials</AllowedGrantType2>
   </AllowedGrantTypes>
   <RedirectUris>
      <RedirectUri1>{AllowedCorsOrigin}/signin-oidc</RedirectUri1>
   </RedirectUris>
   <PostLogoutRedirectUris>
      <PostLogoutRedirectUri1>{AllowedCorsOrigin}/signout-callback-oidc</PostLogoutRedirectUri1>
   </PostLogoutRedirectUris>
   <AllowedCorsOrigins>
      <AllowedCorsOrigin1>http://localhost:5002</AllowedCorsOrigin1>
   </AllowedCorsOrigins>
   <AllowedScopes>
      <AllowedScope1>openid</AllowedScope1>
      <AllowedScope2>sitecore.profile</AllowedScope2>
      <AllowedScope3>sitecore.profile.api</AllowedScope3>
   </AllowedScopes>
   <UpdateAccessTokenClaimsOnRefresh>true</UpdateAccessTokenClaimsOnRefresh>
</ExternalClient>