[JIRA] (JOIDC-116) Permit token without redirect_uri when client has registered only one redirect_uri

[Matteo Perego (Jira)]

Matteo Perego ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=619fc651f241500072c33707 ) *created* an issue

IdP Plugin - OIDC OP ( https://shibboleth.atlassian.net/browse/JOIDC?atlOrigin=eyJpIjoiYjI5YTQwMTBlZDU0NGY4ZmI5NTEyNWYxZGJhNTdlZGUiLCJwIjoiaiJ9 ) / Bug ( https://shibboleth.atlassian.net/browse/JOIDC-116?atlOrigin=eyJpIjoiYjI5YTQwMTBlZDU0NGY4ZmI5NTEyNWYxZGJhNTdlZGUiLCJwIjoiaiJ9 ) JOIDC-116 ( https://shibboleth.atlassian.net/browse/JOIDC-116?atlOrigin=eyJpIjoiYjI5YTQwMTBlZDU0NGY4ZmI5NTEyNWYxZGJhNTdlZGUiLCJwIjoiaiJ9 ) Permit token without redirect_uri when client has registered only one redirect_uri ( https://shibboleth.atlassian.net/browse/JOIDC-116?atlOrigin=eyJpIjoiYjI5YTQwMTBlZDU0NGY4ZmI5NTEyNWYxZGJhNTdlZGUiLCJwIjoiaiJ9 )

Issue Type: Bug Affects Versions: 3.2.0 Assignee: Henri Mikkonen ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A1614c4a5-c89e-4edc-9421-990bd6ea85fd ) Attachments: 0001-third-party-in-pom.xml-for-duo-dependency.patch, 0002-no-error-in-token-request-validation-if-request_uri-.patch Components: Token Endpoint Created: 04/Jul/22 10:16 PM Priority: Trivial Reporter: Matteo Perego ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=619fc651f241500072c33707 )

The OIDC OP refuse a token request without the redirect_uri parameter specified. This is always correct when we have multiple redirect_uri registered. The OIDC Core specs say that when an RP has registered only one redirect_uri and it doesn't submit the redirect_uri in the token request, the OP MAY return an error or not ( https://openid.net/specs/openid-connect-core-1_0.html#TokenRequestValidation - 3.1.3.2). For the upcoming italian OIDC identity federation we'd like to permit this RP behaviour without return an error, improving the ease of RP adoption.  Please check if the patches attached (against 3.2.0) are acceptable, thanks.

( https://shibboleth.atlassian.net/browse/JOIDC-116#add-comment?atlOrigin=eyJpIjoiYjI5YTQwMTBlZDU0NGY4ZmI5NTEyNWYxZGJhNTdlZGUiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDC-116#add-comment?atlOrigin=eyJpIjoiYjI5YTQwMTBlZDU0NGY4ZmI5NTEyNWYxZGJhNTdlZGUiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100201- sha1:f31cb1e )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220705/1c0f8c74/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-bba9a32a-fd4d-4695-9dc8-4f54cc6a1d97
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220705/1c0f8c74/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-d5dbea8c-5194-435e-a4c2-19635c802056
Type: image/png
Size: 563 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220705/1c0f8c74/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-0af6f6b3-8db1-4098-a16a-07415327e094
Type: image/png
Size: 425 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220705/1c0f8c74/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-9c34091f-89c5-44a5-86ca-7e16888f0a03
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220705/1c0f8c74/attachment-0007.png>