solid-oidc icon indicating copy to clipboard operation
solid-oidc copied to clipboard

Make CliendID URIs a MUST

Open elf-pavlik opened this issue 7 months ago • 0 comments

This is intended as a conversation starter. If we want to have proper client constraints, for example, acp:client, we need reliable global identifiers for clients. DynReg could be useful during early development, but production systems must always use URIs to denote clients. This way, the redirect_uri gets verified.

related:

  • https://github.com/solid/security-considerations/issues/17

elf-pavlik avatar Jun 27 '24 19:06 elf-pavlik