theyann

package YOUR_PACKAGE;

import android.content.Context;
import android.os.Build;

import java.io.FileInputStream;
import java.io.FileOutputStream;
import java.security.KeyStore;
import java.security.KeyStoreException;
import java.security.cert.Certificate;

twolfson

We are exploring our options for "Terms of use" and "Privacy policy" generation

Good known options

• Write it based on other sites and have a lawyer check it (estimate $100 to $200 for 1 hour)
• https://www.iubenda.com/en
  • $27/year for hosted international privacy policy (no terms of use without $990/year)
  • Sample: https://www.iubenda.com/privacy-policy/8032310
• https://termsfeed.com/
  • Nickle and dime pricing
• $72 estimated for privacy policy

jawadatgithub

Note for community:

A. IdentityServer3 docs, samples and source code use OIDC & OAuth2 terms interchangeably to refer to same thing in many areas. I think that's make sense because OIDC introduced as complement & extension for OAuth2.

B. IdentityServer3, STS, OP, OIDC server, OAuth2 server, CSP, IDP and others: means same thing (software that provide/issue tokens to clients) as explained in [Terminology] (http://identityserver.github.io/Documentation/docs/overview/terminology.html).

C. Grants and flows mean same thing, grant was the common term in OAuth2 specs and flow is the common term in OIDC specs.

D. This document will not focus on custom flow/grant.

E. [Important] Choosing wrong flow leads to security threat.