openid-implicit-client

openid-implicit-client copied to clipboard

It will be great to have this lib available on npm for easier install

clemsos

providerInfo not defined in OIDC.registerClient

1

If a client is registered dynamically with _setClientInfo({redirect_uri: 'callback'})_; OIDC.registerClient is called. There providerInfo is used in openidconnect.js:1168 (_request.open("POST", providerInfo['registration_endpoint'], false);_), but not defined. So the setClientInfo leads to an...

MarkusFalgenhauer

Validation required in case the ID Token is issued with an access_token in an Implicit Flow (Section 2.2 - Implicit Client Implementer's Guide). http://openid.net/specs/openid-connect-implicit-1_0.html#IDToken

toledorafael

There should be a logout button that calls the end_session endpoint, and utilizes front channel logout http://openid.net/specs/openid-connect-frontchannel-1_0.html Which is supported on the Gluu Server.

nynymike

Synchronous XMLHttpRequest is deprecated

1

 openidconnect.js:737 Synchronous XMLHttpRequest on the main thread is deprecated because of its detrimental effects to the end user's experience

nynymike