https should be required for user_questioning_request_endpoint / user_questioning_request_endpoint

Issue #194 resolved
Joseph Heenan created an issue

In https://openid.net/specs/openid-connect-user-questioning-api-1_0-11.html#rfc.section.3.1, unlike other urls defined in OIDC discovery, these two aren’t required to be https:

user_questioning_request_endpoint

user_questioning_polling_endpoint

Comments (3)

  1. Log in to comment