[Openid-specs-ab] OP Tests: Warn on missing aud and iss from Userinfo endpoint?

Mike Schwartz mike at gluu.org
Sun May 7 16:45:38 UTC 2017

Previous message (by thread): [Openid-specs-ab] RP Tests: ID Token signature validation for code flow
Next message (by thread): [Openid-specs-ab] Issue #195: request and request_uri negative tests (openid/certification)
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

It's not a MUST, but maybe the OP tests should warn about missing aud 
and iss from the Userinfo JWT response?

- Mike

Previous message (by thread): [Openid-specs-ab] RP Tests: ID Token signature validation for code flow
Next message (by thread): [Openid-specs-ab] Issue #195: request and request_uri negative tests (openid/certification)
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

More information about the Openid-specs-ab mailing list