UserInfo Error Response Example missing "Bearer" auth-scheme

Issue #990 resolved
Brian Campbell created an issue

From http://lists.openid.net/pipermail/openid-specs-ab/Week-of-Mon-20160208/005955.html

The example in http://openid.net/specs/openid-connect-core-1_0.html#UserInfoError is incorrect. It has:

  HTTP/1.1 401 Unauthorized
  WWW-Authenticate: error="invalid_token",
    error_description="The Access Token expired"

but should be:

  HTTP/1.1 401 Unauthorized
  WWW-Authenticate: Bearer error="invalid_token",
    error_description="The Access Token expired"

Comments (2)

  1. Log in to comment