Standard - 4.1.4.1. Description for response_type = "code id_token" response must be required.

[hideki nara]

Draft as of September 29, 2011 describes return message only for response_type="code" case.

As discussed in ML, "code + id_token" should be returned in URL fragment part. Otherwise we should think response_type="code+id_token" as Implicit flow, shouldn't we?

[hideki nara]

If id_token MUST be returned from Token Endpoint for response_type="code+id_token" request, this is not an issue.

[hideki nara]

Draft 05 of Sept 30,2011 changed the structure.

"4.2.1. How To Get An Authorization Code, Access Token, and ID Token " describes about request_type and flows for that.