Help get this topic noticed by sharing it on Twitter, Facebook, or email.

Unclear definition of invalid uri

Hi, we're currently implementing OpenIDC in our company.
In 3.2.1.6 of the core specs it is stated: "Unless the Redirection URI is invalid, ..."
Should we only consider syntactical errors as invalid (which we now assume) or also semantical errors?
E.g., a URI like htp::/abc.com is clearly invalid but http://abc.com could also be regarded invalid in this context if not matched with any of the pre-registered values.
1 person has
this question
+1
Reply