Phil Smart

I added the test project. However, both testing conditions will return success. The build is not actually failing (in the test project); you need to inspect the Javadoc @options file...

The issue of it using the patch-module path is reproducible in the test project. But I will see if I can get it to fail during the Javadoc construction

If I want to build the RelyingParty object e.g. ``` final RelyingParty rp = RelyingParty.builder().identity( RelyingPartyIdentity .builder() .id(getRelyingPartyId()) .name(getRelyingPartyName()) .build()).credentialRepository(getCredentialRepository()) .allowOriginPort(isAllowOriginPort()) .allowOriginSubdomain(isAllowOriginSubdomain()) .origins(getOrigins()) .build(); ``` If getOrigins is null, the...

Thanks for the quick reply. Yes, I am currently handling it conditionally, e.g. if the origins are not set (configured on my service) I just leave it out, and if...

Thank you.

Ah, we can not catch it, because the MetadataService will not build if revocation fails. So an option to disable it would be neat.

Many thanks for this super detailed response (and for pointing out the spec) . You're right, disabling a security check was a bit of a dumb request, although the whole...

Thanks, @emlun. Your point about an individual authenticator responding with its current capabilities versus the capabilities of an authenticator model in the MDS, makes perfect sense. The text in the...

Hi @emlun, I was just wondering if there were any updates from the WG on this (realising these things take time, so I'm not necessarily expecting there are).