<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hi all<div class=""><br class=""></div><div class="">Apologies as I missed today’s call as I was at the OIX conference, but this bit was a slight surprise to me:<br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On 29 Sep 2022, at 18:47, Mike Jones via Openid-specs-ab <<a href="mailto:openid-specs-ab@lists.openid.net" class="">openid-specs-ab@lists.openid.net</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta charset="UTF-8" class=""><div class="WordSection1" style="page: WordSection1; caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 11pt;" class=""> George said that redirections for .well-known URLs are allowed, such as from</span> <a href="http://aol.com/.well-known/openid-configuration" class="" style="font-size: 11pt; color: rgb(5, 99, 193);">aol.com/.well-known/openid-configuration</a> <span style="font-size: 11pt;" class="">to another URL</span></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""></o:p></div></div></div></blockquote></div><br class=""></div><div class=""><br class=""></div><div class=""><a href="https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderConfigurationResponse" class="">https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderConfigurationResponse</a> says:</div><div class=""><br class=""></div><div class="">"<span style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: verdana, charcoal, helvetica, arial, sans-serif; font-size: small; background-color: rgb(255, 255, 255);" class="">A successful response MUST use the 200 OK HTTP status code</span><font color="#000000" face="verdana, charcoal, helvetica, arial, sans-serif" size="2" class=""><span style="caret-color: rgb(0, 0, 0);" class="">”</span></font></div><div class=""><span style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: verdana, charcoal, helvetica, arial, sans-serif; font-size: small; background-color: rgb(255, 255, 255);" class=""><br class=""></span></div><div class=""><span style="background-color: rgb(255, 255, 255);" class=""><font color="#000000" face="verdana, charcoal, helvetica, arial, sans-serif" size="2" class=""><span style="caret-color: rgb(0, 0, 0);" class="">To me, this precludes returning a 3xx response (and that is how the </span></font></span><font color="#000000" face="verdana, charcoal, helvetica, arial, sans-serif" size="2" class=""><span style="caret-color: rgb(0, 0, 0);" class="">conformance suite interprets that clause currently).</span></font></div><div class=""><font color="#000000" face="verdana, charcoal, helvetica, arial, sans-serif" size="2" class=""><span style="caret-color: rgb(0, 0, 0);" class=""><br class=""></span></font></div><div class=""><font color="#000000" face="verdana, charcoal, helvetica, arial, sans-serif" size="2" class="">If a redirect is allowed, this might be worth clarifying in an errata.</font></div><div class=""><font color="#000000" face="verdana, charcoal, helvetica, arial, sans-serif" size="2" class=""><br class=""></font></div><div class=""><font color="#000000" face="verdana, charcoal, helvetica, arial, sans-serif" size="2" class="">Thanks</font></div><div class=""><font color="#000000" face="verdana, charcoal, helvetica, arial, sans-serif" size="2" class=""><br class=""></font></div><div class=""><font color="#000000" face="verdana, charcoal, helvetica, arial, sans-serif" size="2" class="">Joseph</font></div><div class=""><font color="#000000" face="verdana, charcoal, helvetica, arial, sans-serif" size="2" class=""><br class=""></font></div><div class=""><span style="background-color: rgb(255, 255, 255);" class=""><font color="#000000" face="verdana, charcoal, helvetica, arial, sans-serif" size="2" class=""><span style="caret-color: rgb(0, 0, 0);" class=""><br class=""></span></font></span></div><div class=""><span style="background-color: rgb(255, 255, 255);" class=""><font color="#000000" face="verdana, charcoal, helvetica, arial, sans-serif" size="2" class=""><span style="caret-color: rgb(0, 0, 0);" class=""><br class=""></span></font></span></div></body></html>