[Openid-specs-ab] [openid/connect] Basic - Tony Nadalin's review comments (issue #724)

[Michael Jones]

--- you can reply above this line ---

New issue 724: Basic - Tony Nadalin's review comments
https://bitbucket.org/openid/connect/issue/724/basic-tony-nadalins-review-comments

Michael Jones:

From: openid-specs-ab-bounces at lists.openid.net [mailto:openid-specs-ab-bounces at lists.openid.net] On Behalf Of Anthony Nadalin
Sent: Thursday, January 24, 2013 2:46 PM
To: openid-specs-ab at lists.openid.net
Subject: [Openid-specs-ab] openid-connect-basic-1_0-23 review

Section 2.2.2
1.        mixes Client and User-Agent, should be consistent and use both or just 1
2.       “this may happen over HTTPS” seems to go against core where it MUST

Section 2.2.3
1.       Should state that TLS needs to be used and point the reader to section 2.3 in RFC6749

Section 2.3
1.       Is “aud” and URI ? same for “azp”?


Section 2.4.2
1.       If the user info endpoint does not have a value for middle_name (or any other member) will it return a “middle_name” :null  or just not return “middle_name”?



--

This is an issue notification from bitbucket.org. You are receiving
this either because you are the owner of the issue, or you are
following the issue.