- edited description
Standard - 4.1.4.1. Description for response_type = "code id_token" response must be required.
Issue #152
invalid
Draft as of September 29, 2011 describes return message only for response_type="code" case.
As discussed in ML, "code + id_token" should be returned in URL fragment part. Otherwise we should think response_type="code+id_token" as Implicit flow, shouldn't we?
Comments (3)
-
reporter -
reporter If id_token MUST be returned from Token Endpoint for response_type="code+id_token" request, this is not an issue.
-
reporter - changed status to invalid
Draft 05 of Sept 30,2011 changed the structure.
"4.2.1. How To Get An Authorization Code, Access Token, and ID Token " describes about request_type and flows for that.
- Log in to comment