Messages - 6.7 unspecified ID Token validation

[Former user]

"The authorization server also MUST validate the request to ensure all required parameters are present and valid."

The sole parameter is the ID Token. It is not specified what constitutes a valid/invalid ID Token - what are the actual validation rules?

I expect to see: - format rules - parameter/claim values (which values from the ID Token should match what data that the RP has, and how the RP obtains and maintains the rvalue)

[Edmund Jay]

addresses #200 Messages - 6.7 unspecified ID Token validation

→ 7d5e0a63f137

[John Bradley]

fixes #200 add id_token verification rules to Sec 7

→ 568b6f76a140