Verify User Question about node-openid-client

[panva]

@douglasrlee I see, well, seeing how http://openid.net/specs/openid-connect-discovery-1_0.html says userinfo_endpoint is RECOMMENDED, and an OP can exist that only supports response_type=id_token i'll sort this out.

Until then just put a value in and change your verify arity so that it's not called.

[panva]

Hello @douglasrlee, similar to #18, change your verify fn signature to (tokenset, done) and no userinfo will be called. I thought this fn arity specific returns are common enough in passport.

Can you suggest how to modify the documentation so that it's clear you can do both of the below?

• tokenset, done
• tokenset, userinfo, done

[douglasrlee]

@panva that makes sense, but it is the fact that I still have to provide the user info endpoint even if I don't want the user info part in the function signature.

const MANDATORY = ['authorization_endpoint', 'jwks_uri', 'token_endpoint', 'userinfo_endpoint'];

[panva]

fixed in v1.6.2