#241 Not possible to not use signed userinfo
Opened 5 years ago by puiterwijk. Modified 5 years ago

We now always insert userinfo_signed_response_alg into the client information, but the check whether signing needs to happen is done as a "if .. in ..", meaning it's not possible to not request signing.

Metadata Update from @puiterwijk:
- Issue assigned to puiterwijk

5 years ago

Login to comment on this ticket.