Request Parameters and Client Metadata for End-User Authentication

[TakahikoKawasaki]

Request parameters and client metadata below are related to end-user authentication.

• prompt request parameter (OIDC Core 1.0 Section 3.1.2.1)
• max_age request parameter (OIDC Core 1.0 Section 3.1.2.1)
• acr_values request parameter (OIDC Core 1.0 Section 3.1.2.1)
• response_type=none (OAuth 2.0 Multiple Response Type Encoding Practices Section 4)
• default_acr_values (OIDC Dynamic Client Registration 1.0 Section 2)
• default_max_age (OIDC Dynamic Client Registration 1.0 Section 2)

These have impacts on the implementation of end-user authentication. It is recommended to take these into consideration from the beginning.

[jgrandja]

Related #53 #57 #205

[dciarniello]

I'm wondering if there's been any movement on this request. If not, I'd like to add my vote for it to be done as clients are beginning to require support for this functionality.

[jgrandja]

@TakahikoKawasaki I'm going to close this issue as it requests multiple enhancements and the preference is to have each enhancement logged in a separate issue. Furthermore, it appears there hasn't been much demand for these enhancements since there is only 1 upvote in over 2 years.