[ready-for-PR] Change SIOP v2 request to OAuth2/JAR parameter set?

[Torsten Lodderstedt]

SIOP v2, Section 10, requires the parameters “scope”, “redirect_uri”, and “response_type” to be present even if a “request” or “request_uri” parameter is present. This seems to be inherited from the OIDC core spec (which predates JAR).

I suggest to modify SIOP v2 to allow requests with request_uri or request to contain the client_id only.

[Joseph Heenan]

I agree, this would be a good change to make.

[Kristina Yasuda]

I agree, too.

[Michael Jones]

We discussed this on the 8-Dec-22 SIOP call. It appears to be ready for a PR.

[Torsten Lodderstedt]

and here is the PR #382

[Kristina Yasuda]

PR merged