Karl issues

Repositories
Issues
Comments

Results 1 issues of


                                            Karl

ID Token Issuer is only validated if Discovery was used

Currently, ID Token Issuer is only validated if Discovery was used... https://github.com/openid/AppAuth-Android/blob/f12592517140ecfe91a411090601b4264ddb641f/library/java/net/openid/appauth/IdToken.java#L119 My understanding of the spec is that [Discovery is optional](https://openid.net/specs/openid-connect-core-1_0.html#Introduction)... > This information is normally obtained via Discovery,...