# 5. Authorization Endpoint (Authentication Request)

**URL:** <https://forum.italia.it/t/5-authorization-endpoint-authentication-request/10919>\
**Category:** Linee Guida OpenID Connect in SPID\
**Created:** [27 Agosto 2019, 11:44am UTC](https://forum.italia.it/t/5-authorization-endpoint-authentication-request/10919 "2019-08-27T11:44:38Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![docs-italia](https://forum.italia.it/user_avatar/forum.italia.it/docs-italia/32/709_2.png) [@docs-italia](https://forum.italia.it/u/docs-italia)\
**Post date:** [27 Agosto 2019, 11:44am UTC](https://forum.italia.it/t/5-authorization-endpoint-authentication-request/10919/1 "2019-08-27T11:44:38Z")

</div>

Per avviare il processo di autenticazione, il RP manda l’utente all’Authorization Endpoint dell’OP selezionato passando in POST o GET una richiesta in formato JWT.

Tale richiesta DEVE essere firmata e cifrata, secondo le modalità definite dall’Agenzia per l’Italia Digitale.

[Continua a leggere su Docs Italia.](https://docs.italia.it/AgID/documenti-in-consultazione/lg-openidconnect-spid-docs/it/bozza/authorization-endpoint-authentication-request.html)

---

<div class="post-metadata">

**Author:** ![daserzw](https://forum.italia.it/user_avatar/forum.italia.it/daserzw/32/66_2.png) [@daserzw](https://forum.italia.it/u/daserzw)\
**Post date:** [25 Settembre 2019, 8:56pm UTC](https://forum.italia.it/t/5-authorization-endpoint-authentication-request/10919/2 "2019-09-25T20:56:07Z")

</div>

Nelle tabelle alcuni claim (colonna Parametro) sono riportati con la prima lettera maiuscola senza alcun apparente motivo.

Davide Vaghetti (GARR)

---

<div class="post-metadata">

**Author:** ![daserzw](https://forum.italia.it/user_avatar/forum.italia.it/daserzw/32/66_2.png) [@daserzw](https://forum.italia.it/u/daserzw)\
**Post date:** [26 Settembre 2019, 2:02pm UTC](https://forum.italia.it/t/5-authorization-endpoint-authentication-request/10919/3 "2019-09-26T14:02:38Z")

</div>

Dato che “response\_mode=form\_post” e’ obbligatorio, sarebbe utile aggiungerlo agli esempi.

Davide Vaghetti (GARR)

---

<div class="post-metadata">

**Author:** ![peppelinux](https://forum.italia.it/user_avatar/forum.italia.it/peppelinux/32/2076_2.png) [@peppelinux](https://forum.italia.it/u/peppelinux)\
**Post date:** [6 Novembre 2019, 1:49pm UTC](https://forum.italia.it/t/5-authorization-endpoint-authentication-request/10919/4 "2019-11-06T13:49:56Z")

</div>

claims.id\_token.nbf non presente in OIDC Core 1.0 ma in  
[https://openid.net/specs/draft-jones-json-web-token-07.html#ReservedClaimName](https://openid.net/specs/draft-jones-json-web-token-07.html#ReservedClaimName)

acronimo di “not before”

---

<div class="post-metadata">

**Author:** ![peppelinux](https://forum.italia.it/user_avatar/forum.italia.it/peppelinux/32/2076_2.png) [@peppelinux](https://forum.italia.it/u/peppelinux)\
**Post date:** [6 Novembre 2019, 1:51pm UTC](https://forum.italia.it/t/5-authorization-endpoint-authentication-request/10919/5 "2019-11-06T13:51:36Z")

</div>

code\_challenge e code\_challenge\_method in RFC7636

[https://tools.ietf.org/html/rfc7636](https://tools.ietf.org/html/rfc7636)

---

<div class="post-metadata">

**Author:** ![peppelinux](https://forum.italia.it/user_avatar/forum.italia.it/peppelinux/32/2076_2.png) [@peppelinux](https://forum.italia.it/u/peppelinux)\
**Post date:** [6 Novembre 2019, 2:07pm UTC](https://forum.italia.it/t/5-authorization-endpoint-authentication-request/10919/6 "2019-11-06T14:07:29Z")

</div>

response\_mode in  
[https://openid.net/specs/oauth-v2-form-post-response-mode-1\_0.html#FormPostResponseMode](https://openid.net/specs/oauth-v2-form-post-response-mode-1_0.html#FormPostResponseMode)

mi chiedo come mai debba essere obbligatorio