Tells whether a signed request object is required for this request: by the setting, the client's entry, the selected authorization server's profile or FAPI.
the client's configuration
what the selected authorization server publishes
true when one is required
Tells whether a signed request object is required for this request: by the setting, the client's entry, the selected authorization server's profile or FAPI.