Same descriptions on OP-RpInitLogout-Bad_redirect_uri and OP-RpInitLogout-Unregistered-post_logout_redirect_uri

openid-certification / oidctest

THE CERTIFICATION TEST SUITE HAS BEEN MIGRATED TO A NEW SERVICE https://www.certificatinon.openid.net

Other

49 stars 15 forks source link

Same descriptions on OP-RpInitLogout-Bad_redirect_uri and OP-RpInitLogout-Unregistered-post_logout_redirect_uri #222

Open travisspencer opened 4 years ago

travisspencer commented 4 years ago

The tests OP-RpInitLogout-Bad_redirect_uri and OP-RpInitLogout-Unregistered-post_logout_redirect_uri have the same exact description:

Sent post_logout_redirect_uri does not match a registered post_logout_redirect_uri

These tests are undoubtedly similar, but it seems that their descriptions should be slightly different from one another.

rohe commented 4 years ago

A proposal ?

travisspencer commented 4 years ago

OP-RpInitLogout-Bad_redirect_uri

Sent post_logout_redirect_uri is completely different from the one that is resisted

OP-RpInitLogout-Unregistered-post_logout_redirect_uri

Sent post_logout_redirect_uri is the same as one that is registered but has an unregistered query string

rohe commented 4 years ago

Thanks ! I have a new version of the oidctest software that deals with all your issues. This text edits will be the last things added. Next step is that Hans/Serkan will bring it up on the test server new-op.