New issue 996: Core - Explicitly Ban 307 as the authorization response redirect https://bitbucket.org/openid/connect/issues/996/core-explicitly-ban-307-as-the Nat Sakimura: It is something that should be dealt within RFC6749 but we may as well note it.