New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[OB3] "openid" scope is not mandatory for PAR request object #214

Open

aka4rKO opened this issue Dec 5, 2024 · 0 comments

Contributor

aka4rKO commented Dec 5, 2024

Description:
Currently the "openid" scope is not mandatory in the request object sent in the PAR request object

Affected Product Version:
OB3

Steps to reproduce:

Send PAR request without "openid" scope in the request object
The above will return a successful response (expected is to return an error)

aka4rKO mentioned this issue

[OB3] Mandating openid scope for PAR requests #212

Merged

15 tasks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment