openid / mobile / issues / #26 - nonce as RECOMMENDED parameter — Bitbucket

Issue #26 wontfix

Jörg Connotte created an issue 2015-09-23

No description provided.

Comments (2)

Jörg Connotte reporter
according to the group nonce is OPTIONAL for the OpenID Connect code flow as it will bring no additional security there. It is however MANDATORY for the implicit and hybrid flow. There seems to be no reason to update it to RECOMMENDED for the code flow.
- 2015-09-23T15:55:53+00:00
Jörg Connotte reporter
- changed status to wontfix
Any Recommentation for nonce should take place in the OpenID Connect specification.
- 2017-06-13T09:17:57+00:00
Log in to comment

Assignee: Jörg Connotte

Type: proposal

Priority: major

Status: wontfix

Component: Authentication

Milestone: –

Votes: 0

Watchers: 0

Jira: the preferred issue tracker for Bitbucket. Join the team!