openid-implicit-client icon indicating copy to clipboard operation
openid-implicit-client copied to clipboard

Validate at_hash in the id_token

Open toledorafael opened this issue 8 years ago • 0 comments

Validation required in case the ID Token is issued with an access_token in an Implicit Flow (Section 2.2 - Implicit Client Implementer's Guide).

http://openid.net/specs/openid-connect-implicit-1_0.html#IDToken

toledorafael avatar May 17 '17 13:05 toledorafael