Closed ri-ch closed 7 years ago
When using the discovery document to validate the signing certificate etc. Is there any way to restrict the token to a specified issuer name? I can set the issuer manually, but in this instance, im no longer able to use the discovery document.
Ive obviously had a long day. As the authority URI is provided instead, this limits validity to tokens issued by that specific server
When using the discovery document to validate the signing certificate etc. Is there any way to restrict the token to a specified issuer name? I can set the issuer manually, but in this instance, im no longer able to use the discovery document.