You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The current fetch endpoint implementation of spid-cie-oidc-django does not follow the OpenID Federation specification when an unknown sub is passed. In this case, the current implementation does raise Http404(), which returns a "404 Not Found" with HTML. However, to comply with the specification, the response should return JSON, not HTML, and the JSON should contain "error": "not_found".
Conceptually, a change like the one below is needed.
sed -i 's/raise Http404()/return JsonResponse({"error":"not_found","error_description":"unknown sub"},status=404)/' spid_cie_oidc/authority/views.py
The text was updated successfully, but these errors were encountered:
the branch draft-41 is a work in progress, I want to take some days to scan each section of the specification with each part of the code to complete the alignments
The current fetch endpoint implementation of spid-cie-oidc-django does not follow the OpenID Federation specification when an unknown
sub
is passed. In this case, the current implementation doesraise Http404()
, which returns a "404 Not Found" with HTML. However, to comply with the specification, the response should return JSON, not HTML, and the JSON should contain"error": "not_found"
.Conceptually, a change like the one below is needed.
The text was updated successfully, but these errors were encountered: