Skip to content

add requirement on status code for IAE http response #716

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
c2bo wants to merge 1 commit into
base: main
Choose a base branch
from
+2 −1
Open

add requirement on status code for IAE http response #716

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion 1.1/openid-4-verifiable-credential-issuance-1_1.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -795,7 +795,7 @@ The response to an Interactive Authorization Request is an HTTP message with the
2. a successful completion of the authorization, as defined in (#iae-authorization-code-response), or
3. an error as defined in Section 2.3 of [@!RFC9126] including the additional error codes defined in (#iae-error-response).

Except in error cases, the following key is required in the JSON document of the response:
Except in error cases, the Authorization Server MUST respond with an HTTP status code in the 2xx range and the following key is required in the JSON document of the response:

* `status`: REQUIRED. String indicating whether an additional interaction is required or the authorization has been completed.

Expand Down Expand Up @@ -3626,3 +3626,4 @@ The technology described in this specification was made available from contribut
* use derived origin for `expected_origins` in IAE flow
* add require_interactive_authorization_request to AS metadata
* add interactive_authorization_endpoint to AS metadata section
* add requirement on status code for iae http responses