Introspection/debug response should be conform OAuth2 specs

Created on 10 February 2022, almost 3 years ago

Updated 24 December 2024, 16 days ago

The introspection/debug response (including error) are not conform OAuth2 specs.

Debug endpoint response needs to be adjusted conform OAuth2 specs: https://datatracker.ietf.org/doc/html/rfc7662#section-2.2
Debug endpoint error response needs to be adjusted conform OAuth2 specs: https://datatracker.ietf.org/doc/html/rfc7662#section-2.3
Test coverage will be included.

📌 Task

Status

Active

Version

6.0

Component

Code

Created by

🇳🇱Netherlands bojan_dev

Live updates comments and jobs are added and updated live.

Incomplete comments

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Comment 16 days ago →
🇳🇱Netherlands idebr
🌱 Move to thephpleague/oauth2-server 9.0 Active has been committed. However, there is no upstream support yet for introspection
Comment 16 days ago →
🇳🇱Netherlands bojan_dev
Yea it's still a milestone of 9 (https://github.com/thephpleague/oauth2-server/milestone/9), postponing the issue for now.

Production build 0.71.5 2024