# request_not_supported

The server does not support the request parameter (OpenID Connect Core 1.0 §3.1.2.6).

## Meaning

This server does not currently send this code. It supports request objects passed by
value (RFC 9101), so a `request` parameter is verified. One that fails is answered
`invalid_request_object` at `/par`, and directly with `invalid_request` at `/authorize`.

## Impact

None from this code.

## Diagnosis

For a refused request object, see the `invalid_request_object` runbook and its
audit record under `oauth.authorization.requested`.

## Mitigation

- As a client developer: sign request objects with a key published at the client's
  `jwks_uri`. See
  [Authorization request integrity](https://www.nauthera.io/docs/v1/tokens#authorization-request-integrity).
- As an operator: nothing to do.

## Escalation

If this server's response carries it, open an issue with the request id and the server
version.

---

[OAuth error runbooks](https://www.nauthera.io/docs/v1/runbooks/oauth) · Generated from [`internal/runbook/oauth.yaml`](https://github.com/nauthera/nauthera-server/blob/main/internal/runbook/oauth.yaml) in nauthera-server.