solid-oidc
solid-oidc copied to clipboard
Make CliendID URIs a MUST
This is intended as a conversation starter. If we want to have proper client constraints, for example, acp:client,
we need reliable global identifiers for clients. DynReg could be useful during early development, but production systems must always use URIs to denote clients. This way, the redirect_uri
gets verified.
related:
- https://github.com/solid/security-considerations/issues/17