[Openid-specs-authzen] HTTP 400 and required attributes

Omri Gazitt omri at aserto.com
Thu Oct 31 06:22:24 UTC 2024


We should add it in the HTTPS binding section that I referenced (which
includes the HTTP status codes)

On Wed, Oct 30, 2024 at 8:52 PM David Brossard via Openid-specs-authzen <
openid-specs-authzen at lists.openid.net> wrote:

> Yes I think so.
>
> On Wed, Oct 30, 2024 at 3:40 PM Eve Maler via Openid-specs-authzen <
> openid-specs-authzen at lists.openid.net> wrote:
>
>> Do we have to qualify that by saying “for HTTP as a transport” or
>> something?
>>
>> Eve Maler | cell and Signal +1 (425) 345-6756 <+1-425-345-6756>
>> Visit the Venn Factory <http://vennfactory.com/>
>>
>> On Oct 30, 2024, at 5:21 PM, Omri Gazitt via Openid-specs-authzen <
>> openid-specs-authzen at lists.openid.net> wrote:
>>
>> 
>> We mention it here
>> <https://openid.github.io/authzen/#name-error-responses> but I agree we
>> could be more explicit and say that not including required attributes will
>> result in a Bad Request.
>>
>> On Wed, Oct 30, 2024 at 1:52 PM David Brossard via Openid-specs-authzen <
>> openid-specs-authzen at lists.openid.net> wrote:
>>
>>> Hi,
>>>
>>> I'm realizing we don't specifically state that not including required
>>> attributes leads to HTTP 400. To me it's obvious - the request is invalid
>>> therefore HTTP 400 Bad Request but do we need to be more specific?
>>>
>>> David
>>> --
>>> Openid-specs-authzen mailing list
>>> Openid-specs-authzen at lists.openid.net
>>> https://lists.openid.net/mailman/listinfo/openid-specs-authzen
>>>
>> --
>> Openid-specs-authzen mailing list
>> Openid-specs-authzen at lists.openid.net
>> https://lists.openid.net/mailman/listinfo/openid-specs-authzen
>>
>> --
>> Openid-specs-authzen mailing list
>> Openid-specs-authzen at lists.openid.net
>> https://lists.openid.net/mailman/listinfo/openid-specs-authzen
>>
>
>
> --
> ---
> David Brossard
> http://www.linkedin.com/in/davidbrossard
> http://twitter.com/davidjbrossard
> http://about.me/brossard
> ---
> Stay safe on the Internet: IC3 Prevention Tips
> <https://www.capefearnetworks.com/wp-content/uploads/2017/05/Internet-Fraud-Prevention-Tips-IC3.pdf>
> Prenez vos précautions sur Internet:
> https://cyber.gouv.fr/bonnes-pratiques-protegez-vous
> --
> Openid-specs-authzen mailing list
> Openid-specs-authzen at lists.openid.net
> https://lists.openid.net/mailman/listinfo/openid-specs-authzen
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-authzen/attachments/20241030/7c8298bd/attachment.htm>


More information about the Openid-specs-authzen mailing list