[Openid-specs-ab] Issue #1160: Registration 2 - Should data: URLs be allowed as valid logo_uri values? (openid/connect)

[serkan özkan]

New issue 1160: Registration 2 - Should data: URLs be allowed as valid logo_uri values?
https://bitbucket.org/openid/connect/issues/1160/registration-2-should-data-urls-be-allowed

Serkan Özkan:

We would like to clarify if “data:” urls with a valid image mime type, e.g `data:image/gif;base64,R0lG....` , should be allowed as valid logo\_uri values in dynamic client registration requests.

data: urls are widely used and supported. And they are convenient for client registration as an additional http request is not needed to fetch the logo image. The image will be embedded in the registration request. 

‌

For more information on data URLs:

[https://tools.ietf.org/html/rfc2397](https://tools.ietf.org/html/rfc2397) `The "data" URL scheme`

[https://developer.mozilla.org/en-US/docs/Web/HTTP/Basics\_of\_HTTP/Data\_URIs](https://developer.mozilla.org/en-US/docs/Web/HTTP/Basics_of_HTTP/Data_URIs)