Merge remote-tracking branch 'jkakavas/master'

Author: John Van de Meulebrouck Brendgard

src/pyop/request_validator.py

@@ -96,9 +96,8 @@ def requested_scope_is_supported(provider, authentication_request):
     supported_scopes = set(provider.provider_configuration['scopes_supported'])
     requested_unsupported_scopes = requested_scopes - supported_scopes
     if requested_unsupported_scopes:
-        raise InvalidAuthenticationRequest('Request contains unsupported/unknown scopes: {}'
-                                           .format(', '.join(requested_unsupported_scopes)),
-                                           authentication_request, oauth_error='invalid_scope')
+        logger.warning('Request contains unsupported/unknown scopes: {}'
+                                           .format(', '.join(requested_unsupported_scopes)))
 
 
 def registration_request_verify(registration_request):

tests/pyop/test_provider.py

@@ -122,13 +122,6 @@ def test_reject_request_with_scope_without_openid(self):
             self.provider.parse_authentication_request(urlencode(self.authn_request_args))
         assert isinstance(exc.value.__cause__, MissingRequiredValue)
 
-    def test_reject_request_with_unknown_scope(self):
-        self.authn_request_args['scope'] = 'openid unknown'
-
-        with pytest.raises(InvalidAuthenticationRequest) as exc:
-            self.provider.parse_authentication_request(urlencode(self.authn_request_args))
-        assert exc.value.oauth_error == 'invalid_scope'
-
     def test_custom_validation_hook_reject(self):
         class TestException(Exception):
             pass