Open jogu opened 4 years ago
The profile lists rp-userinfo-bearer-body as an alternative to rp-userinfo-bearer-header:
The test suite (e.g. https://rp.certification.openid.net:8080/list?profile=C ) lists 'header' as mandatory and body as optional.
My suspicion is the profile should list the 'access token in body' test as 'optional' as OPs aren't required to support that form.
The profile lists rp-userinfo-bearer-body as an alternative to rp-userinfo-bearer-header:
The test suite (e.g. https://rp.certification.openid.net:8080/list?profile=C ) lists 'header' as mandatory and body as optional.
My suspicion is the profile should list the 'access token in body' test as 'optional' as OPs aren't required to support that form.