Skip to content

Commit 2304f0b

Browse files
committed
Removing redundant scopes field from authorization_servers
Removing redundant scopes field from authorization_servers scopes in `authorization_servers` is not adding any value, but may cause confusion. Added a statement indicating "Authorization_servers should satisfy all the scopes listed in `supported_scopes`"
1 parent 55878e6 commit 2304f0b

File tree

1 file changed

+1
-6
lines changed

1 file changed

+1
-6
lines changed

openid-sharedsignals-framework-1_0.md

Lines changed: 1 addition & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -544,18 +544,14 @@ supported_scopes
544544

545545
authorization_servers
546546

547-
> OPTIONAL. An array of supported authorization servers and the scopes they support. Each element of the array is a Authorization Server Descriptor JSON object defined in the section {{authz-server-descriptor}} below. If the `supported_scopes` member is present in the metadata, then the `authorization_servers` MUST also be present, and it MUST provide a server location for every supported scope.
547+
> OPTIONAL. An array of supported authorization servers and the scopes they support. Each element of the array is a Authorization Server Descriptor JSON object defined in the section {{authz-server-descriptor}} below. If the `supported_scopes` member is present in the metadata, then the `authorization_servers` MUST also be present, and it MUST provide a server location for every supported scope. The list of servers should be able to satisfy all the scopes listed in `supported_scope` section.
548548

549549
TODO: consider adding a IANA Registry for metadata, similar to Section 7.1.1 of
550550
{{RFC8414}}. This would allow other specs to add to the metadata.
551551

552552
### Authorization Server Descriptor {#authz-server-descriptor}
553553
An Authorization Server Descriptor is a JSON object that has two keys:
554554

555-
scopes
556-
557-
> REQUIRED. An array of scope names supported by the authorization server
558-
559555
servers
560556

561557
> REQUIRED. An array of authorization server URLs. This is the URL from which the Authorization Server Metadata MAY be obtained by following the process described in Section 3 of RFC8414 {{RFC8414}}
@@ -564,7 +560,6 @@ The following is a non-normative example of an Authorization Server Descriptor
564560

565561
~~~ json
566562
{
567-
"scopes" : ["scope1", "scope2"],
568563
"servers": [
569564
"https://server1.example/base/url",
570565
"https://server2.example/base/url",

0 commit comments

Comments
 (0)