I find this to be an implementation detail, an optimization. As a matter of fact depending on the Request Object flavor the AS implements a second round of validation may be required.
Odesláno z iPhonu > 23. 9. 2019 v 20:46, Janak Amarasena <[email protected]>: > _______________________________________________ OAuth mailing list [email protected] https://www.ietf.org/mailman/listinfo/oauth
