[Openid-specs-ab] Issue #949: Migration - (te) 2., and 6. verification rule (by Markus) (openid/connect)

Nat Sakimura issues-reply at bitbucket.org
Mon Aug 25 07:16:34 UTC 2014


New issue 949: Migration - (te) 2., and 6. verification rule (by Markus)
https://bitbucket.org/openid/connect/issue/949/migration-te-2-and-6-verification-rule-by

Nat Sakimura:

  In sections 2 and 6, something feels a bit strange about retrieving the "iss" simply with a plain GET and Content-Type application/json. I was wondering if this shouldn't instead use OIDC Issuer Discovery / Webfinger? But of course it would work the way it is written now.





More information about the Openid-specs-ab mailing list