Comments (2)
panva
commented on August 22, 2024
Hello @damienbod, the point is, out of the four listed only ONE can be used for RS256 id token signature validation, so a kid is not necessary in this case and the RP should be able to select the right one to validate with.
@zandbelt, maybe we should change the Info for this test to
Use the single matching key out of the Issuer's published set to verify the ID Tokens signature and accept the ID Token after doing ID Token validation.
from oidctest.
damienbod
commented on August 22, 2024
@panva Thanks
from oidctest.
Related Issues (20)
- The UserInfo "sub" claim is not currently being validated HOT 2
- profile doc & code don't seem in alignment over rp-userinfo-bearer-*
- OP-IDToken-C-Signature should not run for 'none'
- OP-nonce-NoReq-noncode does not run for 'code token' HOT 3
- Automatically run all test cases without UI
- Connection refused in every calling of /token endpoint HOT 3
- Can't run tests for Implicit profile (id token+token) HOT 1
- Can't start the op-test service when using docker compose HOT 21
- Run all tests with a different response_mode HOT 3
- No iss parameter in rp-3rd_party-init-login test HOT 3
- Token Endpoint error responses not adhering to spec HOT 3
- Wrong description on OP-BackChannel-Discovery HOT 3
- Same descriptions on OP-RpInitLogout-Bad_redirect_uri and OP-RpInitLogout-Unregistered-post_logout_redirect_uri HOT 3
- OP-BackChannel-Discovery and OP-FrontChannel-Discovery don't assert that OP supports back- and front-channel logout HOT 2
- OP-BackChannel-RpInitLogout error - Not for me! HOT 18
- jwkest.ecc.ECCException: Unknown curve
- SameSite=none on session cookie HOT 6
- rp-id_token-bad-sig-{hs,rs}256 returns somewhat invalid base64 HOT 4
- Wrong tests logs placement HOT 5
- NOTE: THE CERTIFICATION TEST SUITE IS MIGRATING TO A NEW SERVICE https://openid.net/certification/migration
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from oidctest.