...
Removed
Validate the presence and matching of the Bearer header
Authorization
containing the value of theregistration_access_token
attribute returned during registration of the corresponding client.Carry When the invoked method is PUT / register, carry out the validations of sub-items 1, 3, 4, and 6 of item Client registration - POST /register.
When the invoked method is GET /register, carry out the validations of sub-items 1 and 6 of item Client registration - POST /register.
When the invoked method is DELETE /register, carry out the validation of sub-item 1 of item Client registration - POST /register.
Note: RFC7592 provides the possibility of rotating the registration_access_token
issued by the Authorization Server with each use, making it a single-use token. When registering their client applications, institutions should consider this aspect to receive and update the registration_access_token
for the new value received in client maintenance (DCM) operations.
...