Based on the Open GDPR specification, a few features are still missing to be fully compliant with the definition.

• Cache the public key retrieved from the Discover endpoint.
• Check the signature received on the response headers using the public key.
• Cache the supported identity types retrieved from the Discovery Endpoint to do a request validation before sending to the server.
• Cache the supported request types retrieved from the Discovery Endpoint to do a request validation before sending to the server.