[JIRA] (JOIDC-119) userinfo error response for revoked token should be invalid_token, not invalid_request

[Matteo Perego (Jira)]

Matteo Perego ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=619fc651f241500072c33707 ) *created* an issue

IdP Plugin - OIDC OP ( https://shibboleth.atlassian.net/browse/JOIDC?atlOrigin=eyJpIjoiYWU3NDlhOTBjMDcwNGQwYWI5MDA0YzE4OTk5ZTVkZDYiLCJwIjoiaiJ9 ) / Bug ( https://shibboleth.atlassian.net/browse/JOIDC-119?atlOrigin=eyJpIjoiYWU3NDlhOTBjMDcwNGQwYWI5MDA0YzE4OTk5ZTVkZDYiLCJwIjoiaiJ9 ) JOIDC-119 ( https://shibboleth.atlassian.net/browse/JOIDC-119?atlOrigin=eyJpIjoiYWU3NDlhOTBjMDcwNGQwYWI5MDA0YzE4OTk5ZTVkZDYiLCJwIjoiaiJ9 ) userinfo error response for revoked token should be invalid_token, not invalid_request ( https://shibboleth.atlassian.net/browse/JOIDC-119?atlOrigin=eyJpIjoiYWU3NDlhOTBjMDcwNGQwYWI5MDA0YzE4OTk5ZTVkZDYiLCJwIjoiaiJ9 )

Issue Type: Bug Affects Versions: 3.2.1 Assignee: Henri Mikkonen ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A1614c4a5-c89e-4edc-9421-990bd6ea85fd ) Components: UserInfo Endpoint Created: 08/Jul/22 12:49 PM Priority: Trivial Reporter: Matteo Perego ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=619fc651f241500072c33707 )

Hi there!

https://openid.net/specs/openid-connect-core-1_0.html#UserInfoError

cite RFC6750 and

https://datatracker.ietf.org/doc/html/rfc6750#section-3.1

say that invalid_token should be used when “The access token provided is expired, revoked, malformed, or invalid for other reasons.”.

Thanks, Matteo

( https://shibboleth.atlassian.net/browse/JOIDC-119#add-comment?atlOrigin=eyJpIjoiYWU3NDlhOTBjMDcwNGQwYWI5MDA0YzE4OTk5ZTVkZDYiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDC-119#add-comment?atlOrigin=eyJpIjoiYWU3NDlhOTBjMDcwNGQwYWI5MDA0YzE4OTk5ZTVkZDYiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100202- sha1:a3e9824 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220708/a8d9f49c/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-17ff0bda-b9f5-49cd-bfb3-e088321a8655
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220708/a8d9f49c/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-83a6157e-e262-4997-93b8-d0e32e537a42
Type: image/png
Size: 563 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220708/a8d9f49c/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-767e9772-7886-4ab5-bea0-89e30db46a99
Type: image/png
Size: 425 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220708/a8d9f49c/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-113417f2-4bab-4cd4-9041-7177b4d9e728
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220708/a8d9f49c/attachment-0007.png>