[Openid-specs-ab] OP Tests: Warn on missing aud and iss from Userinfo endpoint?

Mike Schwartz mike at gluu.org
Sun May 7 16:45:38 UTC 2017


It's not a MUST, but maybe the OP tests should warn about missing aud 
and iss from the Userinfo JWT response?

- Mike


More information about the Openid-specs-ab mailing list