Skip to content

Commit 0e192c9

Browse files
author
gueuselambix
committed
Add required scope when passing a Request Object
According to the [OpenID Connect Core 1.0 incorporating errata set 2](https://openid.net/specs/openid-connect-core-1_0.html) the client should pass the `scope=openid` parameter when sending the `request_uri` (e.g. after sending a PAR) > Even if a scope parameter is present in the referenced Request Object, a scope parameter MUST always be passed using the OAuth 2.0 request syntax containing the openid scope value to indicate to the underlying OAuth 2.0 logic that this is an OpenID Connect request.
1 parent 16fdc9d commit 0e192c9

1 file changed

Lines changed: 1 addition & 0 deletions

File tree

src/proto/request.c

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -128,6 +128,7 @@ static int oidc_proto_request_auth_push(request_rec *r, struct oidc_provider_t *
128128
apr_table_clear(params);
129129
apr_table_setn(params, OIDC_PROTO_CLIENT_ID, oidc_cfg_provider_client_id_get(provider));
130130
apr_table_setn(params, OIDC_PROTO_REQUEST_URI, request_uri);
131+
apr_table_setn(params, OIDC_PROTO_SCOPE, OIDC_PROTO_SCOPE_OPENID);
131132
authorization_request =
132133
oidc_http_query_encoded_url(r, oidc_cfg_provider_authorization_endpoint_url_get(provider), params);
133134
oidc_http_hdr_out_location_set(r, authorization_request);

0 commit comments

Comments
 (0)