[Openid-specs-ab] Little more feedback
jbufu at janrain.com
Tue Jul 12 01:20:03 UTC 2011
On 11-07-11 03:44 PM, Pam Dingle wrote:
> * section 2.2 - the description of "must return a subset" and "may
> return additional attributes" seems to conflict to me.
It looked like a conflict to me at the first read too; however, I
noticed that the wording after the MUST is that the response "*contains*
a set of claims that are a subset".
So a subset of the defined claims MUST be included with each response,
extra claims MAY be added as well.
The MUST is however superfluous given that the empty set is a subset of
any other set. Intent was probably that the response MUST contain a
non-empty subset of the defined claims.
More information about the Openid-specs-ab