{"action":"opened","issue":{"url":"https://api.github.com/repos/IdentityServer/Thinktecture.IdentityServer3/issues/978","labels_url":"https://api.github.com/repos/IdentityServer/Thinktecture.IdentityServer3/issues/978/labels{/name}","comments_url":"https://api.github.com/repos/IdentityServer/Thinktecture.IdentityServer3/issues/978/comments","events_url":"https://api.github.com/repos/IdentityServer/Thinktecture.IdentityServer3/issues/978/events","html_url":"https://github.com/IdentityServer/Thinktecture.IdentityServer3/issues/978","id":58791837,"number":978,"title":"Validate the client before redirecting to login","user":{"login":"jageall","id":4592105,"avatar_url":"https://avatars.githubusercontent.com/u/4592105?v=3","gravatar_id":"","url":"https://api.github.com/users/jageall","html_url":"https://github.com/jageall","followers_url":"https://api.github.com/users/jageall/followers","following_url":"https://api.github.com/users/jageall/following{/other_user}","gists_url":"https://api.github.com/users/jageall/gists{/gist_id}","starred_url":"https://api.github.com/users/jageall/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jageall/subscriptions","organizations_url":"https://api.github.com/users/jageall/orgs","repos_url":"https://api.github.com/users/jageall/repos","events_url":"https://api.github.com/users/jageall/events{/privacy}","received_events_url":"https://api.github.com/users/jageall/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-02-24T19:34:03Z","updated_at":"2015-02-24T19:34:03Z","closed_at":null,"body":"The authorize endpoint doesn't validate that a client exists in the store before [redirecting to the login lines 144-147](https://github.com/IdentityServer/Thinktecture.IdentityServer3/blob/3d03c544d1f38e9fd0afe85f59e4f70c8b8d4b63/source/Core/Endpoints/Connect/AuthorizeEndpointController.cs#L144-L147) screen. \r\n\r\nIt only gets to the [client validation on line 160](https://github.com/IdentityServer/Thinktecture.IdentityServer3/blob/3d03c544d1f38e9fd0afe85f59e4f70c8b8d4b63/source/Core/Endpoints/Connect/AuthorizeEndpointController.cs#L160) if the user is authenticated.  This leads to the user being shown the signin prompt for a process which can never complete.\r\n\r\nIt would be better if an error was either shown or sent back to the caller instead of redirecting to login"}}