Clarification on claims parameter in auth request validation

[D K]

Hi,

regarding the validation of the claims parameter, I would like to suggest to add the following sentence to https://openid.net/specs/openid-connect-core-1_0.html#AuthRequestValidation:

“As specified in JWT [RFC7519], OPs SHOULD ignore unrecognised claims, that are contained in the claims parameter as defined in Section 5.5.”

best regards

Daniel Keijsers

[Michael Jones]

Adding a clarification along these lines sounds like a reasonable thing to do.

[Brian Campbell]

Such a clarification is maybe reasonable. But citing RFC7519 for it would be wrong.

[Michael Jones]

I believe that this issue is essentially a duplicate of issue #1115. Do others concur?

[Nat Sakimura]

Duplicate of #1115.