#241 Not possible to not use signed userinfo
Opened 6 years ago by puiterwijk. Modified 6 years ago

We now always insert userinfo_signed_response_alg into the client information, but the check whether signing needs to happen is done as a "if .. in ..", meaning it's not possible to not request signing.

Metadata Update from @puiterwijk:
- Issue assigned to puiterwijk

6 years ago

Login to comment on this ticket.