#241 Not possible to not use signed userinfo
Opened 4 years ago by puiterwijk. Modified 4 years ago

We now always insert userinfo_signed_response_alg into the client information, but the check whether signing needs to happen is done as a "if .. in ..", meaning it's not possible to not request signing.

Metadata Update from @puiterwijk:
- Issue assigned to puiterwijk

4 years ago

Login to comment on this ticket.