Can a URI be used as an OIDC client ID?

[Ullfig, Roberto Alfredo]

The issue appears to be a bug with mod_auth_openidc-1.8.8-9 released for Centos 7.

---
Roberto Ullfig - rullfig at uic.edu
Systems Administrator
Enterprise Applications & Services | Technology Solutions
University of Illinois - Chicago
________________________________
From: Cantor, Scott <cantor.2 at osu.edu>
Sent: Wednesday, February 22, 2023 11:29 AM
To: Shib Users <users at shibboleth.net>; Ullfig, Roberto Alfredo <rullfig at uic.edu>
Cc: Wessel, Keith W (UIUC) <kwessel at illinois.edu>
Subject: Re: Can a URI be used as an OIDC client ID?

> I’ll try again to reproduce this on my side this afternoon, too. It’s still not out of
> the question that it’s an IdP bug, but I don’t think so.

I'm like 99% sure we've tested all this with URIs. It's just not imaginable to me we didn't. I do not believe this to be a bug on our side, I am sure it's being chopped elsewhere.

-- Scott


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230301/6a31bcba/attachment.htm>