Examine the point that should be use the PPID extension.

[daisukenishino2]

Requirements

Find out the point that the endpoints should be using PPID extension due to PPID support.

Target Selection Criteria

Limited to AuthZ endpoints.

• These endpoints are required client_id and sub in the token.
• client_id can be obtained from aud in token.

Specific targets

The following endpoints correspond to this criteria.

• OAuth2EndpointController
  • OAuth2 / OIDC
    • OAuth2Token
    • GetUserClaims
    • RevokeToken
    • IntrospectToken
  • CIBA
    • CibaAuthorize
    • CibaPushResult
• OAuth2ResourceServerController
  • ChageToUser
  • 2FA
    • SetDeviceToken
    • GetPushResult
  • TestHybridFlow

First, I'll setting to PPID mode and test these methods.

[daisukenishino2]

Result

It works well, except for ChageToUser.
ChageToUser does not work with PPIDs because it requires a UserStore.

Findings

see : https://techinfoofmicrosofttech.osscons.jp/index.php?PPID#nd9623a2

Remaining issues

The following test cases carry over.

• CIBA
  • CibaAuthorize
  • CibaPushResult
• 2FA
  • SetDeviceToken
  • GetPushResult