New core: Discovered typos, etc

[Vladimir Dzhuvinov]

Hi guys,

I read the entire document and here is a list of what I found:

2.1.3.7. ID Token Validation: bullet 4 - the "and" should be deleted.

2.2. Authentication using the Implicit Flow - "The Authorization Server does not perform Client Authentication before issuing the Access Token. " I think we should drop the "before issuing the Access Token".

4.4.2. Claims Languages and Scripts - "Web site" is capitalised, but it's not an actual term that we have listed at the top of the doc.

5.2.1. URL Referencing the Request Object - What is "attribute values"? This is never mentioned before.

15.16. Implicit Grant Flow Threats - "... is possible if the User-Agent is infested by malware." Infested? I think "infected" would suffice here LOL :-)

Vladimir

[Michael Jones]

"Web site" is a proper name in common usage, just like "Internet". Capitalizing it has the effect of referring to "the Web" (the World Wide Web), as opposed to a web, just like Internet refers to "the Internet", as opposed to an internet.

[Michael Jones]

Fixed #888 - New core: Discovered typos, etc.

→ <<cset 34eb36564aab>>

[Nat Sakimura]

"attribute values" were changed to "requested claim values" but it sounds like a response to the request. Can we just change to "claim values" or "request claim values"?

[Michael Jones]

Fixed #888 - Clarified text about requested values for Claims

→ <<cset 8a1be21db19f>>