Providing "iss" should not be required at the fetch endpoint

openid · Sep 1, 2024 · fdcfd09 · fdcfd09
1 parent 0a8b3df
commit fdcfd09
Showing 1 changed file with 3 additions and 12 deletions.
diff --git a/openid-federation-1_0.xml b/openid-federation-1_0.xml
@@ -3714,20 +3714,12 @@
 	    When client authentication is not used,
             the request MUST be an HTTP request using the GET method
             to a fetch endpoint with the
-            following query parameters, encoded in
+            following query parameter, encoded in
             <spanx style="verb">application/x-www-form-urlencoded</spanx> format.
 	    The request is made to the fetch endpoint of the specified issuer.
           </t>
           <t>
             <list style="hanging">
-              <t hangText="iss">
-                <vspace/>
-                REQUIRED. The Entity Identifier of the issuer
-                from which the Subordinate Statement is to be issued. Because of the
-                normalization of the URL, multiple issuers MAY resolve to a
-                shared fetch endpoint. This parameter makes it explicit exactly
-                from which issuer the Subordinate Statement MUST come.
-              </t>
               <t hangText="sub">
                 <vspace/>
                 REQUIRED. The Entity Identifier of the subject
@@ -3750,7 +3742,6 @@
             </name>
             <artwork><![CDATA[
 GET /federation_fetch_endpoint?
-iss=https%3A%2F%2Fedugain%2Eorg&
 sub=https%3A%2F%2Fopenid%2Esunet%2Ese HTTP/1.1
 Host: edugain.org
 ]]></artwork>
@@ -3786,11 +3777,11 @@ Host: edugain.org
             </name>
             <artwork><![CDATA[
 {
-  "iss": "https://edugain.org/federation",
+  "iss": "https://edugain.org",
   "sub": "https://openid.sunet.se",
   "exp": 1568397247,
   "iat": 1568310847,
-  "source_endpoint": "https://edugain.org/federation/federation_fetch_endpoint",
+  "source_endpoint": "https://edugain.org/federation_fetch_endpoint",
   "jwks": {
     "keys": [
       {