parameters that must not be present in authorization challenge request

oauth-wg / oauth-first-party-apps

Other

11 stars 8 forks source link

Open Sakurann opened 1 week ago

Sakurann commented 1 week ago

I think request_uri, code_challenge, and code_challenge_method authorization request parameters MUST NOT be provided in authorization challenge request?
and why response_type parameter is not mandatory in the authorization challenge request?