says response_type parameter value MUST include token and id_token when just id_token would be fine

Issue #822 resolved
Brian Campbell created an issue

http://openid.net/specs/openid-connect-messages-1_0-16.html#Messages says, "For some Clients, the Implicit Grant will be used to obtain an Access Token without using an Authorization Code. In this case, the response_type parameter value MUST include token and id_token." But what about just id_token?

Comments (4)

  1. Log in to comment