Annotate
mod_lib_ldap/dev/TODO.md @ 6334:9b03238d4e0e
mod_http_oauth2: Only issue id_token when granted openid scope
OpenID Connect Core 1.0 states that OIDC is only being done if the
"openid" scope is included.
https://openid.net/specs/openid-connect-core-1_0.html#rfc.section.3.1.2.1
Less details given out by default is good for privacy and byte count.
| author |
Kim Alvefur <zash@zash.se> |
| date |
Tue, 15 Jul 2025 01:46:38 +0200 |
| parent |
809:1d51c5e38faa |
| rev |
line source |
|
809
|
1 * Make groups optional
|
|
|
2 * Make groups work with both posixGroup and groupOfNames
|