[Openid-specs-authzen] HTTP 400 and required attributes

[David Brossard]

Yes I saw that question but it does not mention that 400 is triggered when
there are missing mandatory attributes. Obviously it's common sense but it
wouldn't hurt to spell it out.

On Wed, Oct 30, 2024, 3:21 PM Omri Gazitt <omri at aserto.com> wrote:

> We mention it here
> <https://openid.github.io/authzen/#name-error-responses> but I agree we
> could be more explicit and say that not including required attributes will
> result in a Bad Request.
>
> On Wed, Oct 30, 2024 at 1:52 PM David Brossard via Openid-specs-authzen <
> openid-specs-authzen at lists.openid.net> wrote:
>
>> Hi,
>>
>> I'm realizing we don't specifically state that not including required
>> attributes leads to HTTP 400. To me it's obvious - the request is invalid
>> therefore HTTP 400 Bad Request but do we need to be more specific?
>>
>> David
>> --
>> Openid-specs-authzen mailing list
>> Openid-specs-authzen at lists.openid.net
>> https://lists.openid.net/mailman/listinfo/openid-specs-authzen
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-authzen/attachments/20241030/61697896/attachment.htm>