Comments (5)
The problem is that you're returning a 403.
If RFC 6749 says anything about HTTP error codes it is that it should be a 400.
For some reason OIDC core has added 401 just for Userinfo responses.
No one mentions 403.
I have OPs returning a 200 with an error message you're the first returning a 403 :-)
I can make the tool also accept 403 but it will take a while.
from oidctest.
We should issue a warning if the status code is not the expected one.
from oidctest.
A warning should be issued if it's not a 401 (or possibly a 400). The use of 403 is wrong, and should result in a warning.
from oidctest.
This took me some while to figure out, it would be great if the test tool showed a warning or potentially fail if 403 was issued.
from oidctest.
that's rolled out now on production (and test) as part of release 2.2.0
from oidctest.
Related Issues (20)
- The UserInfo "sub" claim is not currently being validated HOT 2
- profile doc & code don't seem in alignment over rp-userinfo-bearer-*
- OP-IDToken-C-Signature should not run for 'none'
- OP-nonce-NoReq-noncode does not run for 'code token' HOT 3
- Automatically run all test cases without UI
- Connection refused in every calling of /token endpoint HOT 3
- Can't run tests for Implicit profile (id token+token) HOT 1
- Can't start the op-test service when using docker compose HOT 21
- Run all tests with a different response_mode HOT 3
- No iss parameter in rp-3rd_party-init-login test HOT 3
- Token Endpoint error responses not adhering to spec HOT 3
- Wrong description on OP-BackChannel-Discovery HOT 3
- Same descriptions on OP-RpInitLogout-Bad_redirect_uri and OP-RpInitLogout-Unregistered-post_logout_redirect_uri HOT 3
- OP-BackChannel-Discovery and OP-FrontChannel-Discovery don't assert that OP supports back- and front-channel logout HOT 2
- OP-BackChannel-RpInitLogout error - Not for me! HOT 18
- jwkest.ecc.ECCException: Unknown curve
- SameSite=none on session cookie HOT 6
- rp-id_token-bad-sig-{hs,rs}256 returns somewhat invalid base64 HOT 4
- Wrong tests logs placement HOT 5
- NOTE: THE CERTIFICATION TEST SUITE IS MIGRATING TO A NEW SERVICE https://openid.net/certification/migration
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from oidctest.