Deleting the response_type=token tests

[Mike Jones]

The response_type=token isn’t used by OpenID Connect.  Roland, can you please delete this test from your code?

               mj-02 - Request with response_type=token

 

Also, please change the code for these tests, which currently depend upon mj-02, to instead depend upon “mj-06 - Request with response_type=id_token token”:

               oic-token-userinfo - Implicit flow and Userinfo request

               oic-token-userinfo_bb - Implicit flow, UserInfo request using POST and bearer body authentication

               mj-51 - Login no nonce

 

And if anything else now depends upon mj-02, please correct those as well.

 

                                                            Thanks a bunch,

                                                            -- Mike

 

[Richer, Justin P.]

Since response_type=token is still useful for generic OAuth testing, I would suggest not deleting it but instead just not running that test (or depending on it) for the "run all the OIDC tests" command.

 -- Justin

--
You received this message because you are subscribed to the Google Groups "OpenID Connect Interop" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openid-connect-in...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[John Bradley]

Yes,  Delete from the OIDC Tests, not from the generic OAuth the tests.   That was how I took Mikes message.