Deleting the response_type=token tests

Skip to first unread message

Mike Jones

Oct 21, 2014, 9:45:02 PM10/21/14
to Roland Hedberg,

The response_type=token isn’t used by OpenID Connect.  Roland, can you please delete this test from your code?

               mj-02 - Request with response_type=token


Also, please change the code for these tests, which currently depend upon mj-02, to instead depend upon “mj-06 - Request with response_type=id_token token”:

               oic-token-userinfo - Implicit flow and Userinfo request

               oic-token-userinfo_bb - Implicit flow, UserInfo request using POST and bearer body authentication

               mj-51 - Login no nonce


And if anything else now depends upon mj-02, please correct those as well.


                                                            Thanks a bunch,

                                                            -- Mike


Richer, Justin P.

Oct 22, 2014, 9:42:04 AM10/22/14
to, Roland Hedberg
Since response_type=token is still useful for generic OAuth testing, I would suggest not deleting it but instead just not running that test (or depending on it) for the "run all the OIDC tests" command.

 -- Justin

You received this message because you are subscribed to the Google Groups "OpenID Connect Interop" group.
To unsubscribe from this group and stop receiving emails from it, send an email to
For more options, visit

John Bradley

Oct 22, 2014, 11:15:37 AM10/22/14
to, Roland Hedberg
Yes,  Delete from the OIDC Tests, not from the generic OAuth the tests.   That was how I took Mikes message.
Reply all
Reply to author
0 new messages