Mention claim_types_supported and claims_supported application to verified_claims

[Kai Lehmann]

The OIDC Discovery spec defines claims_supported and claim_types_supported. We should mention that claims_supported should also list the verified_claims.

Additionally the eKYC spec should state that when an IdP declares to support distributed and aggregated claim types in its discovery metadata (claim_types_supported) RPs must assume that this applies to verified_claims as well.

[Naohiro Fujie]

Related to the PR #52, abort/omit, if the OpenID Provider does not provide claims even though it have stated to support the verified_claims, what will happen?

[Kai Lehmann]

I’ll do a PR for that.

[Kai Lehmann]

@Naohiro Fujie I don’t see a problem in regards to not returning claims even if they are listed as supported. It’s the same with standard claims in OIDCC. even if an OP does support them, the End-User might choose to prevent releasing the data so it will not show up in the response.

[Kai Lehmann]

For claims supported in verified_claims section, there is a specific metadata defined already: claims_in_verified_claims_supported

As we have this separate metadata, the claims_supported section does not need to list claims which will be provided within verified_claims.

‌

[Kai Lehmann]

Add requirement to let OP advertise distributed/aggregated claim types when used within verified_claims

Close #1215

→ <<cset ae5bc732d194>>