Open TakahikoKawasaki opened 3 years ago
OIDC Core 1.0 defines special scope values for claims (Section 5.4) and the claims request parameter (Section 5.5).
scope
claims
These have considerably big impacts on the implementation of ID Token and UserInfo Endpoint. It is highly recommended to support them from the beginning. Otherwise, source code rewriting will be required with high probability.
Note that OpenID Connect for Identity Assurance 1.0 (Implementer's Draft 2) assumes that authorization server implementations support the claims request parameter.
Related #176
jgrandja
commented
3 years ago
OIDC Core 1.0 defines special
scopevalues for claims (Section 5.4) and theclaimsrequest parameter (Section 5.5).These have considerably big impacts on the implementation of ID Token and UserInfo Endpoint. It is highly recommended to support them from the beginning. Otherwise, source code rewriting will be required with high probability.
Note that OpenID Connect for Identity Assurance 1.0 (Implementer's Draft 2) assumes that authorization server implementations support the
claimsrequest parameter.