{"action":"created","issue":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1718","labels_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1718/labels{/name}","comments_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1718/comments","events_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1718/events","html_url":"https://github.com/IdentityServer/IdentityServer3/issues/1718","id":100733175,"number":1718,"title":"[question] Response Type","user":{"login":"ankur--bhatia","id":907087,"avatar_url":"https://avatars.githubusercontent.com/u/907087?v=3","gravatar_id":"","url":"https://api.github.com/users/ankur--bhatia","html_url":"https://github.com/ankur--bhatia","followers_url":"https://api.github.com/users/ankur--bhatia/followers","following_url":"https://api.github.com/users/ankur--bhatia/following{/other_user}","gists_url":"https://api.github.com/users/ankur--bhatia/gists{/gist_id}","starred_url":"https://api.github.com/users/ankur--bhatia/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ankur--bhatia/subscriptions","organizations_url":"https://api.github.com/users/ankur--bhatia/orgs","repos_url":"https://api.github.com/users/ankur--bhatia/repos","events_url":"https://api.github.com/users/ankur--bhatia/events{/privacy}","received_events_url":"https://api.github.com/users/ankur--bhatia/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-08-13T10:24:01Z","updated_at":"2015-08-13T15:36:29Z","closed_at":null,"body":"code+idtoken -- is not matching the responsetype. We RP is redirecting the customer to the authorize endpoint using the below request.\r\n<pre>\r\nhttps://*.*.com/connect/authorize?client_id=MyCLIENTID&redirect_uri=https%3a%2f%2f*.**.com&response_mode=form_post&response_type=code+id_token&scope=openid+offline_access+profile_read&state=OpenIdConnect.AuthenticationProperties%3****&post_logout_redirect_uri=http%3a%2f%2fwww.**.com\r\n</pre>\r\nBut for some cases -- Identity Server fails to decode the response type correctly. And hence the validation fails. \r\nFollowing is the number of times that error is happening\r\n![authorizerequestvalidatorexception](https://cloud.githubusercontent.com/assets/907087/9247733/8f80b014-41ad-11e5-8408-f06f159b1cff.JPG)\r\nSo it is not consistent -- as in there is a particular browser/user-agent or some scenario which causes this issue. \r\nAnyone has experienced this in the wild. "},"comment":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/comments/130732092","html_url":"https://github.com/IdentityServer/IdentityServer3/issues/1718#issuecomment-130732092","issue_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1718","id":130732092,"user":{"login":"brockallen","id":649492,"avatar_url":"https://avatars.githubusercontent.com/u/649492?v=3","gravatar_id":"","url":"https://api.github.com/users/brockallen","html_url":"https://github.com/brockallen","followers_url":"https://api.github.com/users/brockallen/followers","following_url":"https://api.github.com/users/brockallen/following{/other_user}","gists_url":"https://api.github.com/users/brockallen/gists{/gist_id}","starred_url":"https://api.github.com/users/brockallen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/brockallen/subscriptions","organizations_url":"https://api.github.com/users/brockallen/orgs","repos_url":"https://api.github.com/users/brockallen/repos","events_url":"https://api.github.com/users/brockallen/events{/privacy}","received_events_url":"https://api.github.com/users/brockallen/received_events","type":"User","site_admin":false},"created_at":"2015-08-13T15:36:29Z","updated_at":"2015-08-13T15:36:29Z","body":"That's unfortunate that they do this."}}