Consent flow

[Edmund Jay]

Comments from TL :

I also don’t understand how consent works in case the client can obtain (different) credentials over some timespan. Do you expect the user to consent to this upfront in the single authorisation flow or do you assume the user is called back from the credential endpoint

‌

[Tom Jones]

This is the wrong question. The right question is “Can the user have final say over any submission to the client?”