Merge pull request #321 from ConsumerDataStandardsAustralia/defect/307

Incorrect non-normative example

slate/source/includes/releasenotes/releasenotes.1.27.0.html.md

@@ -21,6 +21,7 @@ This release addresses the following minor defects raised on [Standards Staging]
 - [Staging Issue #197 - Update client registration non-normative examples to include energy sectors](https://github.com/ConsumerDataStandardsAustralia/standards-staging/issues/197)
 - [Staging Issue #305 - Long lines break words and cause scrollbars](https://github.com/ConsumerDataStandardsAustralia/standards-staging/issues/305)
 - [Staging Issue 306 - Body parameter for JWT POST + PUT not displayed](https://github.com/ConsumerDataStandardsAustralia/standards-staging/issues/306)
+- [Staging Issue 307 - Incorrect non-normative example](https://github.com/ConsumerDataStandardsAustralia/standards-staging/issues/307)
 
 This release addresses the following change requests raised on [Standards Maintenance](https://github.com/ConsumerDataStandardsAustralia/standards-maintenance/issues):
 
@@ -70,6 +71,7 @@ This release addresses the following Decision Proposals published on [Standards]
 
 |Change|Description|Link|
 |------|-----------|----|
+| Incorrect non-normative example | **[Standards Staging #307](https://github.com/ConsumerDataStandardsAustralia/standards-staging/issues/307):** Updated the 'code_challenge_methods_supported' property of the OpenID Provider Configuration to be an array | [Security Endpoints](../../#security-endpoints) |
 | Body parameter for JWT POST + PUT | **[Standards Staging #306](https://github.com/ConsumerDataStandardsAustralia/standards-staging/issues/306):** Updated 'Non-normative Examples' to include JWT Body parameter for POST and PUT | [DCR APIs](../../#dcr-apis) |
 | Updated non-normative SSA examples | **[Standards Staging #197](https://github.com/ConsumerDataStandardsAustralia/standards-staging/issues/197):** Updated encoded and decoded example SSAs to include energy scopes and minor updates for clarity and consistency. | [Security Profile](../../#security-profile)<br>[DCR APIs](../../#dcr-apis) |
 | Corrected typo | **[Standards Maintenance #599](https://github.com/ConsumerDataStandardsAustralia/standards-maintenance/issues/599):** Corrected typo in the description of the `software_roles` field in the **Client Registration** and **DCR APIs** sections. Addresses [this issue comment](https://github.com/ConsumerDataStandardsAustralia/standards-maintenance/issues/599#issuecomment-1700463647) | [Security Profile](../../#security-profile) |

slate/source/includes/security/endpoints/_oidc_provider_configuration.md

@@ -1,6 +1,8 @@
 ### OpenID Provider Configuration End Point
 
 ```diff
+Updated the 'code_challenge_methods_supported' property of the OpenID Provider Configuration to be an array
+
 Updated [FAPI-RW-Draft] to refer to [FAPI-1.0-Advanced]
 ```
 
@@ -37,7 +39,7 @@ Content-Type: application/json
   "token_endpoint_auth_signing_alg_values_supported": ["ES256", "PS256"],
   "userinfo_endpoint": "https://www.dh.com.au/userinfo",
 
-  "code_challenge_methods_supported": "S256",
+  "code_challenge_methods_supported": ["S256"],
   "introspection_endpoint": "https://www.dh.com.au/introspect",
   "revocation_endpoint": "https://www.dh.com.au/revoke",