Skip to main content

​
Overview

When the response_type parameter of an authorization request contains** id_token in its value, the scope** parameter of the request must contains openid in its value.

​
Detail

When calling the Authlete /auth/authorization API, if the response_type in the parameters contains id_token, please make the** scope** parameter contains openid in its value. Otherwise, the API will return the response like below. 
{
    "type": "authorizationResponse",
    "resultCode": "A004302",
    "resultMessage": "[A004302] The value of 'response_type' (id_token) is not allowed when 'scope' does not contain 'openid'.",
    "action": "BAD_REQUEST",
    "client": ...
}