Issues encountered during OIDC conformance suite run

[Yasasr1]

This is a list of all issues encountered when running OIDC conformance suite against IS 5.11.0 beta 5

Failures

• State missing from error response
• Authorization requests with response_type=id_token token fail
• 'error' Field from authorization endpoint error response has an unexpected value
• "server_error" from authorization endpoint when "response_type=code id_token"
• jQuery import missing from oauth_response.html
• The HTTP method used in authorization error response in form post mode is not 'POST'
• 'updated_at' claim from userinfo endpoint response is in milliseconds
• State parameter is missing in the Error response in the Form Post mode
• at_hash claim available in the id_token when an access token is not returned

Warnings

• Sending access token through request body to oauth2/userinfo
• ID token doesn't contain acr claims
• Access token not revoked after using the same authorization code
• Add auth_time to ID token
• Error when adding "Middle Name" claim value
• Claims requested through scope parameter are available in the ID Token when there is an Access Token
• Claims not found in id_token for Implicit requests with claims as essential

[isharak]

This issue is being closed due to extended inactivity. Please feel free to reopen it if further attention is needed. Thank you for helping us keep the issue list relevant and focused!