[Openid-specs-fapi] Issue #210: A number should be assigned to the last sentence in FAPI Part 2, 5.2.3 (openid/fapi)
issues-reply at bitbucket.org
Fri Jan 18 02:28:08 UTC 2019
New issue 210: A number should be assigned to the last sentence in FAPI Part 2, 5.2.3
FAPI Implementer's Draft version 2, Part 2, 5.2.3. has the following sentence at the bottom.
> To verify that the authorization response was not tampered using ID Token as the detached signature, the client shall verify that s_hash value is equal to the value calculated from the state value in the authorization response in addition to all the requirements in 220.127.116.11 of [OIDC].
A number should be assigned to this sentence. To be concrete, this sentence should be listed as the 10th clause in the section.
More information about the Openid-specs-fapi