cbe3423·Author: Joseph Heenan·Closed by: Joseph Heenan·2022-08-17
Description
This seems to be an ommission; we already require the OP to support discovery. Requiring the RP to use it provides protection against some forms of attacks as discussed in:
This seems to be an ommission; we already require the OP to support discovery. Requiring the RP to use it provides protection against some forms of attacks as discussed in:
https://bitbucket.org/openid/fapi/issues/525/decide-on-what-to-do-for-a-cuckoo-s-token
related to #536