[Openid-specs-ab] Issue #118: Separate tests verifying that jwks_uri and claims_supported are published (OP-Discovery-Values) (openid/certification)

Michael Jones issues-reply at bitbucket.org
Fri Mar 20 01:27:17 UTC 2015


New issue 118: Separate tests verifying that jwks_uri and claims_supported are published (OP-Discovery-Values)
https://bitbucket.org/openid/certification/issue/118/separate-tests-verifying-that-jwks_uri-and

Michael Jones:

The current test `OP-Discovery-Values` checks two things - that jwks_uri is published and that claims_supported is published.  The problem with that is that claims_supported is *always* required for the Config profile whereas jwks_uri is only required for the Config profile when ID Token signing is supported (not when ID Tokens only use "alg":"none").

Therefore, replace the test `OP-Discovery-Values` with the two new tests:
```
OP-Discovery-jwks_uri - Verify that jwks_uri is published [Config, Dynamic]
OP-Discovery-claims_supported - Verify that claims_supported is published [Config, Dynamic]
```
The first should be shown for the Config profile when ID Token signing is supported. `"profile": ".T..s"`

The second should always be shown for the Config profile. `"profile": ".T."`

Responsible: Rohe


More information about the Openid-specs-ab mailing list