Closed ferjm closed 7 years ago
Instead of signing only the { id: <key>, scope: 'client' } parameters, we need to add the redirection urls to the JWT payload, so these parameters as signed as well.
{ id: <key>, scope: 'client' }
Fixed by #69
ferjm
commented
7 years ago
Instead of signing only the
{ id: <key>, scope: 'client' }parameters, we need to add the redirection urls to the JWT payload, so these parameters as signed as well.