In example, 200 OK response should be 302 Found

Issue #961 resolved
James Manger created an issue

The example authentication response in section 2 should be a redirect (eg 302) to the RP’s URI, particularly as there is an associated Location HTTP header.

Change: HTTP /1.1 200 OK Location: https://client.example.com/cb# id_token=eyJhbGciOiJSUzI1NiIsImtpZCI6IktleTAwMSJ9.ew0KIC To: HTTP /1.1 302 Found Location: https://client.example.com/cb# id_token=eyJhbGciOiJSUzI1NiIsImtpZCI6IktleTAwMSJ9.ew0KIC

Comments (2)

  1. Log in to comment