[Openid-specs-ab] Issue #1509: [Federation] request_object is usable at the PAR endpoint (openid/connect)

[Takahiko Kawasaki]

New issue 1509: [Federation] request_object is usable at the PAR endpoint
https://bitbucket.org/openid/connect/issues/1509/federation-request_object-is-usable-at-the

Takahiko Kawasaki:

[Section 10.1.1.2](https://openid.net/specs/openid-connect-federation-1_0.html#rfc.section.10.1.1.2) of [OpenID Connect Federation 1.0](https://openid.net/specs/openid-connect-federation-1_0.html) says “the applicable methods are **three**”. However, because the PAR endpoint can accept a request object \(FAPI actually requires it\), the number of applicable methods at the PAR endpoint is **four**.

That is,

1. `private_key_jwt`
2. `tls_client_auth`
3. `self_signed_tls_client_auth`
4. `request_object`

‌