Hello, I am trying to use OpenIDDict with the Commerce Content Delivery Api. I have setup an OpenIDConnectApplication as shown:

services.AddOpenIDConnect<SiteUser>(
                useDevelopmentCertificate: true,
                signingCertificate: null,
                encryptionCertificate: null,
                createSchema: true,
                options =>
            {
                var application = new OpenIDConnectApplication()
                {
                    ClientId = "postman-client",
                    ClientSecret = "postman",
                    Scopes = { 
                        "openid",
                        "offline_access",
                        "profile", 
                        "email", 
                        "roles",
                        "anonymous_id",
                        ContentDeliveryApiOptionsDefaults.Scope,
                        CommerceApiOptionsDefaults.Scope }
                };
              });
            services.AddOpenIDConnectUI();

and my CommerceAPI :

services.AddCommerceApi<SiteUser>(OpenIDConnectOptionsDefaults.AuthenticationScheme);

I have configured postman to use client_credentials grant type and had my token ready.

I then went ahead and called the api:

api/episerver/v3.0/customers/signup

what I got is a 403 Forbidden error.

I went into the commerce api customer controller and looked up the endpoint:

 [HttpPost]
        [Route("customers/signup")]
        [Authorize(Policy = "episerver:com:customers")]
        [Produces(typeof(SignUpModel))]
        public async Task<IActionResult> SignUp(SignUpModel accountModel)
        {
            IActionResult actionResult = CheckDisableIdentity();
            if (actionResult != null)
            {
                return actionResult;
            }

            return await SignUpInternal(accountModel, checkAnonymousScope: false);
        }

I saw this policy they have on this endpoint episerver:com:customers. I am not sure what that policy is. It's causing a 403 error, yet I am not sure what to provide for it.

Could someone please shed a light on this?

Anyhelp is appreciated, and thanks in advance.