Registration - 2. userinfo_encrypted_response_enc default value

Issue #971 resolved
Edmund Jay created an issue

The current text :

userinfo_encrypted_response_enc
OPTIONAL. JWE enc algorithm [JWA] REQUIRED for encrypting UserInfo Responses. 
If userinfo_encrypted_response_alg is specified, the default for this value is 
A128CBC-HS256. When userinfo_encrypted_response_enc is included,
userinfo_encrypted_response_alg MUST also be provided

There is a inconsistency with the sentence "If userinfo_encrypted_response_alg is specified, the default for this value is A128CBC-HS256"

It should say "is omitted" instead of "is specified".

Comments (2)

  1. Log in to comment