id_token_signed_response missing

Issue #1 resolved
Pamela Dingle created an issue

Noted by Brian C:

id_token_signed_response_alg isn't in uk-openbanking-registration-profile.md anywhere but according to http://openid.net/specs/openid-connect-registration-1_0.html#ClientMetadata 'The default, if omitted, is RS256.' But OB doesn't want to allow use of RS256 (only ES and PS) so that default won't work.

Comments (2)

  1. Log in to comment