Timeline for Does the OpenID Connect Core specification incorrectly define the OpenID Provider and Relying Party in terms of human participants?
Current License: CC BY-SA 3.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 5, 2018 at 14:21 | comment | added | rndgstn |
What about the case where a confidential Client authenticates to the Authorization Server via the OAuth 2 Client Credentials grant type by providing its client_id and client_secret? At least with WSO2 Identity Server such a client will receive both an Access Token and an ID Token even though the flow is a pure OAuth 2 flow rather than one of the three that OpenID Connect defines. There is indirect human involvement here -- someone has to define what the confidential client can do and arrange for that information to make it into the JWTs -- but no direct human involvement.
|
|
| Mar 5, 2018 at 9:16 | history | edited | Johan | CC BY-SA 3.0 |
More clarification and fix mistake
|
| Mar 5, 2018 at 9:05 | history | answered | Johan | CC BY-SA 3.0 |