Skip to content

Spec not clear as to which auth flows are supported #72

Closed

Description

@bitbucket-import-issues

Originally submitted by dgtonge (Dave Tonge) on 2017-03-02

e..g Authorization Code Flow, Implicit Flow, Hybrid Flow
We should be explicit as to what we support


Bitbucket status: closed

Bitbucket origin: issue 72

Activity

  1. bitbucket-import-issues commented on Jul 2, 2026

    @bitbucket-import-issues
    Author

    Originally submitted by Nat (Nat Sakimura) on 2017-03-02

    Since we agreed that we need to have both the request and response signed, only the viable flow is the Hybrid Flow.

  2. bitbucket-import-issues commented on Jul 2, 2026

    @bitbucket-import-issues
    Author

    Originally submitted by dgtonge (Dave Tonge) on 2017-03-30

    We discussed on the call that I will make a pull request with a clarification

  3. bitbucket-import-issues commented on Jul 2, 2026

    @bitbucket-import-issues
    Author

    Originally submitted by Nat (Nat Sakimura) on 2017-04-04

    Just waiting for a pull request.

  4. bitbucket-import-issues commented on Jul 2, 2026

    @bitbucket-import-issues
    Author

    Originally submitted by SaschaZeGerman (Sascha Preibisch) on 2017-04-25

    Please provide the location where this should be fixed or updated.

  5. bitbucket-import-issues commented on Jul 2, 2026

    @bitbucket-import-issues
    Author

    Originally submitted by dgtonge (Dave Tonge) on 2017-04-26

    Actually I think its a bit clearer now:

    shall require the response_type values code id_token or code id_token token;
    shall return ID Token as a detached signature to the authorization response;
    shall include state hash, s_hash, in the ID Token to protect the state value;
    

    I think we can close this.

  6. bitbucket-import-issues commented on Jul 2, 2026

    @bitbucket-import-issues
    Author

    Originally submitted by Nat (Nat Sakimura) on 2017-04-26

    Going to close this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions