[Openid-specs-ab] Certification question:'OP-redirect_uri-Missing' only in Dynamic?

[thomasclinganjones at gmail.com]

Well, if it’s dynamic client again, they I will not be trying to use your test jig. That was just too hard for a use case that is not supported in any interesting real-world environment.

thx ..tom

From: Mike Jones via Openid-specs-ab
Sent: Wednesday, September 12, 2018 1:39 PM
To: Artifact Binding/Connect Working Group
Cc: Mike Jones
Subject: Re: [Openid-specs-ab] Certification question:'OP-redirect_uri-Missing' only in Dynamic?

It’s in Dynamic because it’s straightforward to test when dynamic client registration is supported.  When it is, the test tool can register multiple redirect_uri values.  When dynamic client registration isn’t supported, the client typically only has a single redirect_uri value.

Yes, it’s relevant all the time, but testing it isn’t really practical otherwise.

                                                       -- Mike

From: Openid-specs-ab <openid-specs-ab-bounces at lists.openid.net> On Behalf Of Nat Sakimura via Openid-specs-ab
Sent: Thursday, August 30, 2018 11:51 PM
To: openid-specs-ab at lists.openid.net Ab <openid-specs-ab at lists.openid.net>
Cc: Nat Sakimura <sakimura at gmail.com>
Subject: [Openid-specs-ab] Certification question: 'OP-redirect_uri-Missing' only in Dynamic?

Hi

I just started to look at the conformance profile 3.0 [1]. 

[1] http://openid.net/wordpress-content/uploads/2018/06/OpenID-Connect-Conformance-Profiles.pdf 

There is a test 'OP-redirect_uri-Missing' which tests whether the OP Reject request without redirect_uri when multiple registered. It is only required in the Dynamic profile and not in Basic etc. Is there any particular reason for this? I think this test is also relevant to Basic etc. 

Best regards, 


-- 
Nat Sakimura (=nat)
Chairman, OpenID Foundation
http://nat.sakimura.org/
@_nat_en

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20180912/dd118c6b/attachment.html>