diff --git a/src/OpenIddict/OpenIddictProvider.Discovery.cs b/src/OpenIddict/OpenIddictProvider.Discovery.cs index 44bdbae7..1913b03e 100644 --- a/src/OpenIddict/OpenIddictProvider.Discovery.cs +++ b/src/OpenIddict/OpenIddictProvider.Discovery.cs @@ -42,9 +42,11 @@ namespace OpenIddict // excluded from the response by the OpenID Connect server middleware. context.Metadata[OpenIdConnectConstants.Metadata.ClaimsSupported] = new JArray(options.Claims); - // Note: the optional "claims" parameter is not supported by OpenIddict, - // so a "false" flag is returned to encourage clients not to use it. + // Note: the optional claims/request/request_uri parameters are not supported + // by OpenIddict, so "false" is returned to encourage clients not to use them. context.Metadata[OpenIdConnectConstants.Metadata.ClaimsParameterSupported] = false; + context.Metadata[OpenIdConnectConstants.Metadata.RequestParameterSupported] = false; + context.Metadata[OpenIdConnectConstants.Metadata.RequestUriParameterSupported] = false; context.Metadata[OpenIddictConstants.Metadata.ExternalProvidersSupported] = new JArray( from provider in context.HttpContext.Authentication.GetAuthenticationSchemes() diff --git a/test/OpenIddict.Tests/OpenIddictProviderTests.Discovery.cs b/test/OpenIddict.Tests/OpenIddictProviderTests.Discovery.cs index 87d4e311..962bf052 100644 --- a/test/OpenIddict.Tests/OpenIddictProviderTests.Discovery.cs +++ b/test/OpenIddict.Tests/OpenIddictProviderTests.Discovery.cs @@ -172,7 +172,7 @@ namespace OpenIddict.Tests } [Fact] - public async Task HandleConfigurationRequest_ClaimsParameterSupportedIsReturned() + public async Task HandleConfigurationRequest_DefaultParametersAreReturned() { // Arrange var server = CreateAuthorizationServer(); @@ -184,6 +184,8 @@ namespace OpenIddict.Tests // Assert Assert.False((bool) response[OpenIdConnectConstants.Metadata.ClaimsParameterSupported]); + Assert.False((bool) response[OpenIdConnectConstants.Metadata.RequestParameterSupported]); + Assert.False((bool) response[OpenIdConnectConstants.Metadata.RequestUriParameterSupported]); } [Fact]