[Openid-specs-ab] Issue #949: Migration - (te) 2., and 6. verification rule (by Markus) (openid/connect)
issues-reply at bitbucket.org
Mon Aug 25 07:16:34 UTC 2014
New issue 949: Migration - (te) 2., and 6. verification rule (by Markus)
In sections 2 and 6, something feels a bit strange about retrieving the "iss" simply with a plain GET and Content-Type application/json. I was wondering if this shouldn't instead use OIDC Issuer Discovery / Webfinger? But of course it would work the way it is written now.
More information about the Openid-specs-ab