[JIRA] (JOIDCRP-10) Improve scope resolution for Authentication Requests

[Scott Cantor (Jira)]

Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) *commented* on JOIDCRP-10 ( https://shibboleth.atlassian.net/browse/JOIDCRP-10?atlOrigin=eyJpIjoiN2IyODExODRiNDc5NGI3NWI4ZDRjMzhjYzEwYWYyY2YiLCJwIjoiaiJ9 )

Re: Improve scope resolution for Authentication Requests ( https://shibboleth.atlassian.net/browse/JOIDCRP-10?atlOrigin=eyJpIjoiN2IyODExODRiNDc5NGI3NWI4ZDRjMzhjYzEwYWYyY2YiLCJwIjoiaiJ9 )

The client secret thing is a new wrinkle since that’s never been a requirement before and of course client_id being pairwise is also a horrible idea. So this is a bit more in the vein of “how do we handle something this broken?”.

I would probably argue for making that a separate configuration unless it turns out that every single thing is pairwise, in which case if we’re going to end up with overrides per OP anyway then we might as well. But that wouldn’t be my expectation.

( https://shibboleth.atlassian.net/browse/JOIDCRP-10#add-comment?atlOrigin=eyJpIjoiN2IyODExODRiNDc5NGI3NWI4ZDRjMzhjYzEwYWYyY2YiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDCRP-10#add-comment?atlOrigin=eyJpIjoiN2IyODExODRiNDc5NGI3NWI4ZDRjMzhjYzEwYWYyY2YiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100192- sha1:0395bb9 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220218/834b4878/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-09a638c2-a326-4350-b031-8677bdf6f882
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220218/834b4878/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-32db94bb-742b-4a84-80d5-4dfdf2618ff8
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220218/834b4878/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-dfe32d62-c6c6-4c56-94ce-079566b3385a
Type: image/png
Size: 468 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220218/834b4878/attachment-0005.png>