Migration - (te) 2., and 6. verification rule (by Markus)
Issue #949
wontfix
In sections 2 and 6, something feels a bit strange about retrieving the "iss" simply with a plain GET and Content-Type application/json. I was wondering if this shouldn't instead use OIDC Issuer Discovery / Webfinger? But of course it would work the way it is written now.
Comments (2)
-
-
reporter - changed status to wontfix
Markus accepted to reject.
- Log in to comment
Tentatively rejected since doing any more is probably unnecessarily complicated, but we should find out whether the xri.net implementation will work.