[Openid-specs-fapi] Issue #536: Discovery should be mandated for clients (openid/fapi)

josephheenan issues-reply at bitbucket.org
Tue Aug 9 08:08:33 UTC 2022


New issue 536: Discovery should be mandated for clients
https://bitbucket.org/openid/fapi/issues/536/discovery-should-be-mandated-for-clients

Joseph Heenan:

As noted in [https://bitbucket.org/openid/fapi/issues/525/decide-on-what-to-do-for-a-cuckoo-s-token#comment-63894845](https://bitbucket.org/openid/fapi/issues/525/decide-on-what-to-do-for-a-cuckoo-s-token#comment-63894845) the current FAPI2 profile requires OPs to support discovery but does not mandate RPs to use discovery.

I believe this was an accidental omission and we should mandate RPs use discovery.


More information about the Openid-specs-fapi mailing list