Auto-post OIDC authorization response?
Scott Cantor
scott at restingparrotsoftware.com
Mon Mar 23 20:59:07 UTC 2026
> On Mar 23, 2026, at 4:42 PM, B via users <users at shibboleth.net> wrote:
>
> Thanks. How about support for code responses over GET where the last status from profile/oidc/authorize is HTTP 200, perhaps using meta-equiv refresh or Javascript?
If you're asking if it's supported, the answer is no.
I don't think it's clear that that's allowed either, so even if we wanted to, there would have to be clarity around that question for interoperability sake, but in any event it isn't going to be there any time soon.
-- Scott
More information about the users
mailing list