OIDC dynamic registration and requested scopes

[Wessel, Keith]

Thanks, Scott. That's useful. OIDC extension developers, have you all had any thoughts on how you might address this in the short or long term?

Keith


-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Cantor, Scott
Sent: Wednesday, April 29, 2020 6:07 PM
To: Shib Users <users at shibboleth.net>
Subject: Re: OIDC dynamic registration and requested scopes

On 4/29/20, 6:49 PM, "users on behalf of Wessel, Keith" <users-bounces at shibboleth.net on behalf of kwessel at illinois.edu> wrote:

> Can anyone give me a clue why this might be happening or where I should look next?

The code comment says:

            //TODO: Nimbus seems to be interpreting scope in different way as many RPs, currently the scope
            //is removed in this phase, better solution TODO.

So that's "why" if not an answer.

Presuming that it's an optional field I would have advised rejecting the request rather than ignoring the field, unless it's explicitly defined to be advisory in the specification.

-- Scott


-- 
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net