beusink
beusink
The specification is unclear about what to do when redirect_uri parameter (or response_uri for that matter) and the Client Identifier Prefix `redirect_uri` are both present and do not match. Section...
Section 8.2 states: "The following new Authorization Request parameter is defined to be used in conjunction with Response Mode `direct_post`: `response_uri`: REQUIRED when ..." Section "5.1 New Parameters This specification...
Section 8.2 states that response_uri is REQUIRED when the Response Mode direct_post is used. Section 5.9.3 contradicts this: "redirect_uri: This prefix value indicates that the original Client Identifier part (without...
In section 5.2 Existing parameters, response_mode is listed as REQUIRED. However, it does not appear in examples listed in section 5.4 and 5.9.3. Adding response_mode=... or with a value to...