private static void GetTokenByClientCertificate()

{

    var client = new HttpClient();

    var disco = client.GetDiscoveryDocumentAsync("{identityServiceUrl}").GetAwaiter().GetResult(); ;

    if (disco.IsError)

    {

        Console.WriteLine(disco.Error);

        return;

    }

    var tokenResponse = client.RequestClientCredentialsTokenAsync(new ClientCredentialsTokenRequest

    {

        Address = disco.TokenEndpoint,

        ClientAssertion = new ClientAssertion()

        {

            Type = OidcConstants.ClientAssertionTypes.JwtBearer,

            Value = CreateClientAuthJwt(disco)

        },

        Scope = "cloudgovernance.fullcontrol.all",

    }).GetAwaiter().GetResult();

    if (tokenResponse.IsError)

    {

        Console.WriteLine(tokenResponse.Error);

        return;

    }

    Console.WriteLine(tokenResponse.Json);

}

private static string CreateClientAuthJwt(DiscoveryDocumentResponse response)

{

    var clientId = "{client ID}";

    // set exp to 5 minutes

    var tokenHandler = new JwtSecurityTokenHandler { TokenLifetimeInMinutes = 5 };

    var securityToken = tokenHandler.CreateJwtSecurityToken(

        // iss must be the client_id of our application

        issuer: clientId,

        // aud must be the identity provider (token endpoint)

        audience: response.TokenEndpoint,

        // sub must be the client_id of our application

        subject: new ClaimsIdentity(

          new List<Claim> { new Claim("sub", clientId),

          new Claim("username", "{username}"),

          new Claim("jti", Guid.NewGuid().ToString())}),

        // sign with the private key (using RS256 for IdentityServer)

        signingCredentials: new SigningCredentials(

          new X509SecurityKey(new X509Certificate2(LoadCertificate())), "RS256")

    );

    return tokenHandler.WriteToken(securityToken);

}

private static X509Certificate2 LoadCertificate()

{

    //Gao certificate

    var store = new X509Store(StoreName.My, StoreLocation.LocalMachine);

    store.Open(OpenFlags.ReadOnly);

    var certificate = store.Certificates.Find(

            X509FindType.FindByThumbprint,

            "{thumbprint}",

            false)[0];

    return certificate;

}

private static void GetTokenByClientSecret()

{

    var client = new HttpClient();

    var disco = client.GetDiscoveryDocumentAsync("https://identity.avepointonlineservices.com ").GetAwaiter().GetResult();

    if (disco.IsError)

    {

        Console.WriteLine(disco.Error);

        return;

    }

    var tokenResponse = client.RequestClientCredentialsTokenAsync(new ClientCredentialsTokenRequest

    {

        Address = disco.TokenEndpoint,

        ClientId = "{client id}",

        ClientSecret = "{clientsecret}",

        Scope = "cloudgovernance.fullcontrol.all",

        Parameters = new Parameters() { new KeyValuePair<string, string>("username", "{user name}") }

    }).GetAwaiter().GetResult();

    if (tokenResponse.IsError)

    {

        Console.WriteLine(tokenResponse.Error);

        return;

    }

    Console.WriteLine(tokenResponse.Json);

}