[prev in list] [next in list] [prev in thread] [next in thread] 

List:       shibboleth-users
Subject:    Re: OIDC OP 3.4 and issueIdTokenViaRefreshToken
From:       "Cantor, Scott via users" <users () shibboleth ! net>
Date:       2023-07-31 22:47:04
Message-ID: 133B8B0B-4569-4697-8098-503E1A287750 () osu ! edu
[Download RAW message or body]

> Could there be a bug in the default value for this property when implicitly
> set in the OIDC SSO flow? It definitely returned an ID token in 3.3.0 without
> enabling the token flow. I can file a bug if you like.

The logic derives a value of false if the active profile configuration isn't the \
expected type.

I guess that's a bug, but the ability to leave out the token profile bean is largely \
a compatibility thing, it was meant to be temporary and would eventually probably be \
disallowed.

-- Scott


-- 
For Consortium Member technical support, see \
https://shibboleth.atlassian.net/wiki/x/ZYEpPw To unsubscribe from this list send an \
email to users-unsubscribe@shibboleth.net


[prev in list] [next in list] [prev in thread] [next in thread]