Hi all,

In the OAuth Extensions Error Registry managed by IANA, invalid_client is 
listed as having a usage location of "token endpoint, authorization endpoint", 
citing RFC6749, however, RFC6749's Section 4.1.2.1 "Authorization Code Grant -> 
Authorization Response -> Error Response" does not list invalid_client.

https://www.iana.org/assignments/oauth-parameters#extensions-error

I'm not sure where the IANA registry contents is from, given that RFC6749 does 
not include the initial registry contents. The only place invalid_client is 
listed in RFC6749 is on the token endpoint.

Can someone clarify if `invalid_client` is valid for the authorization endpoint 
and if that error is redirectable?

— Emelia
_______________________________________________
OAuth mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to