Multiple acr_values are being passed as multiple values instead of space seperated string

[BoomerIsSpartacus]

According to the spec should multiple acr values be a space seperated string https://openid.net/specs/openid-connect-core-1_0.html: "acr_values
OPTIONAL. Requested Authentication Context Class Reference values. Space-separated string that specifies the acr values that the Authorization Server is being requested to use for processing this Authentication Request, with the values appearing in order of preference. The Authentication Context Class satisfied by the authentication performed is returned as the acr Claim Value, as specified in Section 2. The acr Claim is requested as a Voluntary Claim by this parameter."

But the library is wrongly splitting multiple values into multiple parameters and passing it along as such.

[guillp]

Hi. Thanks for the report. There is indeed a bug:

from request_oauth2client import 
AuthorizationRequest(
    acr_values="foo bar",
    client_id="clientid", authorization_endpoint="http://myas.local/auth",
    code_challenge_method=None, nonce=None, state=None)
# http://myas.local/auth?client_id=clientid&scope=openid&response_type=code&acr_values=foo&acr_values=bar
# contains 2 acr_values parameters

I'll fix it ASAP.

In the meantime you can workaround it by passing a list instead:

from request_oauth2client import 
AuthorizationRequest(
    acr_values=["foo", "bar"],
    client_id="clientid", authorization_endpoint="http://myas.local/auth",
    code_challenge_method=None, nonce=None, state=None)
# http://myas.local/auth?client_id=clientid&scope=openid&response_type=code&acr_values=foo+bar
# contains a single acr_values with a space separated list