[Openid-specs-ab] response_types_supported

Roland Hedberg roland.hedberg at adm.umu.se
Thu Jan 26 08:20:58 UTC 2012


If a client gets back:

'response_types_supported': [u'code', u'token', u'id_token']

as part of the response on a provider configuration request.

Does this mean that any and all combinations of the three are supported ?
Or does all combinations have to be explicitly listed, a'la

'response_types_supported': [u'code', u'token', u'id_token', u'code token', u'code id_token', u'id_token token']


If 'response_types_supported' is omitted then I assume this is equivalent to:

'response_types_supported': [u'code']

-- Roland

More information about the Openid-specs-ab mailing list