(ed) A number should be assigned to the last sentence in FAPI Part 2, 5.2.3
FAPI Implementer's Draft version 2, Part 2, 5.2.3. has the following sentence at the bottom.
To verify that the authorization response was not tampered using ID Token as the detached signature, the client shall verify that s_hash value is equal to the value calculated from the state value in the authorization response in addition to all the requirements in 3.3.2.12 of [OIDC].
A number should be assigned to this sentence. To be concrete, this sentence should be listed as the 10th clause in the section.
Comments (7)
-
-
- changed status to resolved
Editorial change to fix issue
#210→ <<cset 287b12998361>>
-
- changed status to open
To be closed when PR is merged
-
- changed status to resolved
Merged in
#210-editorial (pull request #102)Editorial change to fix issue
#210Approved-by: Nat Sakimura sakimura@gmail.com Approved-by: Joseph Heenan joseph@authlete.com
→ <<cset c3c614041b73>>
-
- changed component to Part 2: Advanced
-
- changed component to FAPI 1 – Part 2: Advanced
-
- changed component to FAPI 1: Advanced
- Log in to comment