More info on error.

Author: rohe

src/oidcendpoint/endpoint.py

@@ -285,8 +285,9 @@ def client_authentication(self, request, auth=None, **kwargs):
                     raise
 
         if authn_info["method"] not in self.client_authn_method:
-            LOGGER.warning("Wrong client authentication method was used")
-            raise WrongAuthnMethod("Wrong authn method")
+            LOGGER.error("Wrong client authentication method was used: %s",
+                         authn_info["method"])
+            raise WrongAuthnMethod("Wrong authn method: {}".format(authn_info["method"]))
 
         return authn_info
 
@@ -351,6 +352,8 @@ def do_response(self, response_args=None, request=None, error="", **kwargs):
         if response_args is None:
             response_args = {}
 
+        LOGGER.debug("do_response kwargs: %s", kwargs)
+
         resp = None
         if error:
             _response = ResponseMessage(error=error)
@@ -393,7 +396,11 @@ def do_response(self, response_args=None, request=None, error="", **kwargs):
                     try:
                         fragment_enc = kwargs["fragment_enc"]
                     except KeyError:
-                        fragment_enc = fragment_encoding(kwargs["return_type"])
+                        _ret_type = kwargs.get("return_type")
+                        if _ret_type:
+                            fragment_enc = fragment_encoding(_ret_type)
+                        else:
+                            fragment_enc = False
 
                     if fragment_enc:
                         resp = _response.request(kwargs["return_uri"], True)

src/oidcendpoint/oidc/authorization.py

@@ -14,6 +14,7 @@
 from oidcmsg.oauth2 import AuthorizationErrorResponse
 from oidcmsg.oauth2 import AuthorizationRequest
 from oidcmsg.oidc import AuthorizationResponse
+from oidcmsg.oidc import Claims
 from oidcmsg.oidc import verified_claim_name
 
 from oidcendpoint import rndstr
@@ -139,6 +140,9 @@ def acr_claims(request):
     acrdef = None
 
     _claims = request.get('claims')
+    if isinstance(_claims, str):
+        _claims = Claims().from_json(_claims)
+
     if _claims:
         _id_token_claim = _claims.get("id_token")
         if _id_token_claim: