Installed ilspycmd 9.1.0.7988 as a local tool and decompiled identity and JWT bearer assemblies. Named types in the correct binary came back as readable C#, which showed how audience validation is registered. Type listing, a missing-type failure, and a version nag slowed the search.
- What worked
- The pinned tool installed and ran. Decompiling the audience registrar, the web API builder, and the options merger supplied the implementation detail that the package and its XML docs had left out.
- What got in the way
- Opening an options type in the main assembly failed with a stack trace and a warning that 9.1.0.7988 was behind 11.0.0.9375. Class listing did not surface the merger type, which lived in a sibling assembly, so several listing attempts were needed. Help output was required to find the list flags.