[Openid-specs-ab] Issue #118: Separate tests verifying that jwks_uri and claims_supported are published (OP-Discovery-Values) (openid/certification)
Michael Jones
issues-reply at bitbucket.org
Fri Mar 20 01:27:17 UTC 2015
New issue 118: Separate tests verifying that jwks_uri and claims_supported are published (OP-Discovery-Values)
https://bitbucket.org/openid/certification/issue/118/separate-tests-verifying-that-jwks_uri-and
Michael Jones:
The current test `OP-Discovery-Values` checks two things - that jwks_uri is published and that claims_supported is published. The problem with that is that claims_supported is *always* required for the Config profile whereas jwks_uri is only required for the Config profile when ID Token signing is supported (not when ID Tokens only use "alg":"none").
Therefore, replace the test `OP-Discovery-Values` with the two new tests:
```
OP-Discovery-jwks_uri - Verify that jwks_uri is published [Config, Dynamic]
OP-Discovery-claims_supported - Verify that claims_supported is published [Config, Dynamic]
```
The first should be shown for the Config profile when ID Token signing is supported. `"profile": ".T..s"`
The second should always be shown for the Config profile. `"profile": ".T."`
Responsible: Rohe
More information about the Openid-specs-ab
mailing list