Federation: 4.1.1. subset_of edge cases

Issue #1156 resolved
Vladimir Dzhuvinov created an issue


Is my reading of the spec correct that applying the subset_of operation to a JSON array metadata parameter must never produce a policy error? So, if the parameter is null, empty JSON array or no values intersect, then the result must be an empty JSON array [] ?

The bottom of section 4.3 implies that producing empty arrays is OK: https://openid.net/specs/openid-connect-federation-1_0.html#rfc.section.4.3

Comments (4)

  1. Roland Hedberg

    I would say that if applying a subset_of operation results in an empty JSON array that is an error. Empty subset_of arrays can never match anything so it MUST be an error.

  2. Log in to comment