[Federation] Fix metadata_policy example in figure 17

Issue #2119 resolved
Vladimir Dzhuvinov created an issue

The example contains a metadata claim that shouldn’t be included:

https://openid.bitbucket.io/connect/openid-federation-1_0.html#figure-17

Comments (6)

  1. Vladimir Dzhuvinov reporter
    {
      "metadata_policy": {
        "openid_relying_party": {
          "contacts": {
            "add": "helpdesk@example.com"
          },
          "logo_uri": {
            "one_of": [
              "https://example.com/logo_small.svg",
              "https://example.com/logo_big.svg"
            ],
            "default": "https://example.com/logo_small.svg"
          }
        }
      },
      "metadata": {
        "openid_relying_party": {
          "policy_uri": "https://example.com/policy.html",
          "tos_uri": "https://example.com/tos.html"
        }
      }
    }
    

    {
      "metadata_policy": {
        "openid_relying_party": {
          "contacts": {
            "add": "helpdesk@example.com"
          },
          "logo_uri": {
            "one_of": [
              "https://example.com/logo_small.svg",
              "https://example.com/logo_big.svg"
            ],
            "default": "https://example.com/logo_small.svg"
          }
        }
      }
    }
    

  2. Vladimir Dzhuvinov reporter

    Figure 16 includes a trailing comma after default:

    "metadata_policy": {
      "openid_relying_party": {
        "id_token_signed_response_alg": {
          "one_of": [
            "ES256",
            "ES384"
          ],
          "default": "ES256",
        },
        "response_types": {
          "subset_of": [
            "code",
            "code id_token"
          ]
        }
      }
    }
    

  3. Vladimir Dzhuvinov reporter

    Figure 18 has two metadata parameter that must be removed:

    https://openid.bitbucket.io/connect/openid-federation-1_0.html#figure-18

    "metadata": {
      "openid_relying_party": {
        "contacts": [
          "rp_admins@cs.example.com",
          "helpdesk@example.com"
        ],
        "logo_uri": "https://example.com/logo_small.svg",
        "policy_uri": "https://example.com/policy.html", <--- remove
        "tos_uri": "https://example.com/tos.html", <--- remove
        "id_token_signed_response_alg": "ES256",
        "response_types": [
          "code"
        ],
        "redirect_uris": [
          "https://cs.example.com/rp1"
        ]
      }
    }
    

  4. Log in to comment