You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Removing redundant scopes field from authorization_servers
Removing redundant scopes field from authorization_servers
scopes in authorization_servers is not adding any value, but may cause confusion.
Added a statement indicating "Authorization_servers should satisfy all the scopes listed in supported_scopes"
Copy file name to clipboardExpand all lines: openid-sharedsignals-framework-1_0.md
+1-7Lines changed: 1 addition & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -544,18 +544,14 @@ supported_scopes
544
544
545
545
authorization_servers
546
546
547
-
> OPTIONAL. An array of supported authorization servers and the scopes they support. Each element of the array is a Authorization Server Descriptor JSON object defined in the section {{authz-server-descriptor}} below. If the `supported_scopes` member is present in the metadata, then the `authorization_servers` MUST also be present, and it MUST provide a server location for every supported scope.
547
+
> OPTIONAL. An array of supported authorization servers and the scopes they support. Each element of the array is a Authorization Server Descriptor JSON object defined in the section {{authz-server-descriptor}} below. If the `supported_scopes` member is present in the metadata, then the `authorization_servers` MUST also be present, and it MUST provide a server location for every supported scope. The list of servers MUST satisfy all the scopes listed in `supported_scope` section.
548
548
549
549
TODO: consider adding a IANA Registry for metadata, similar to Section 7.1.1 of
550
550
{{RFC8414}}. This would allow other specs to add to the metadata.
551
551
552
552
### Authorization Server Descriptor {#authz-server-descriptor}
553
553
An Authorization Server Descriptor is a JSON object that has two keys:
554
554
555
-
scopes
556
-
557
-
> REQUIRED. An array of scope names supported by the authorization server
558
-
559
555
servers
560
556
561
557
> REQUIRED. An array of authorization server URLs. This is the URL from which the Authorization Server Metadata MAY be obtained by following the process described in Section 3 of RFC8414 {{RFC8414}}
@@ -564,7 +560,6 @@ The following is a non-normative example of an Authorization Server Descriptor
0 commit comments