Support for POSTs to userinfo endpoint #42
Labels
area/identity-model
Issues related to Identity Model
impact/non-breaking
The fix or change will not be a breaking one
priority/4
Low
Currently we always make a GET to the userinfo endpoint, but the spec does allow for POSTs. POSTs are appropriate if you wanted to include client authentication or other parameters in the body of the request, but currently we produce a GET with a body, which we shouldn't do.
See also IdentityModel/IdentityModel#255, IdentityModel/IdentityModel#469 and IdentityModel/IdentityModel#255.
The text was updated successfully, but these errors were encountered: