Hi
There seems to be a bug in passing the scope param in the id_token token response.
I requested openid all scopes and the respoinse url had openid%252Ball.
So you're html encoding the + sign. I think you should be html encoding only the names of the scopes (if any encoding is needed at all)
Hi
There seems to be a bug in passing the scope param in the
id_token tokenresponse.I requested
openid allscopes and the respoinse url hadopenid%252Ball.So you're html encoding the + sign. I think you should be html encoding only the names of the scopes (if any encoding is needed at all)