Federation: 4.1.1. subset_of edge cases
Issue #1156
resolved
https://openid.net/specs/openid-connect-federation-1_0.html#rfc.section.4.1.1
Is my reading of the spec correct that applying the subset_of
operation to a JSON array metadata parameter must never produce a policy error? So, if the parameter is null
, empty JSON array or no values intersect, then the result must be an empty JSON array []
?
The bottom of section 4.3 implies that producing empty arrays is OK: https://openid.net/specs/openid-connect-federation-1_0.html#rfc.section.4.3
Comments (4)
-
-
-
assigned issue to
-
assigned issue to
-
Roland has address this in his local copy.
-
- changed status to resolved
Fixed in the public copy.
- Log in to comment
I would say that if applying a
subset_of
operation results in an empty JSON array that is an error. Emptysubset_of
arrays can never match anything so it MUST be an error.