From 8253c9fa3af3d8e1baa73a078fe50187365037ad Mon Sep 17 00:00:00 2001
From: npm1 <npm@chromium.org>
Date: Wed, 15 Nov 2023 16:07:11 -0500
Subject: [PATCH] b (#513)

---
 spec/index.bs | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/spec/index.bs b/spec/index.bs
index 9e4b2bc8..8ba92d0c 100644
--- a/spec/index.bs
+++ b/spec/index.bs
@@ -460,6 +460,10 @@ To <dfn>compute the connection status</dfn> given an {{IdentityProviderConfig}}
 {{IdentityProviderAccount}} |account|, and a |globalObject|, run the following steps. This returns
 <dfn for="compute the connection status">connected</dfn> or
 <dfn for="compute the connection status">disconnected</dfn>.
+    1. If |account| [=map/contains=] {{IdentityProviderAccount/approved_clients}} and
+        |account|'s {{IdentityProviderAccount/approved_clients}} does not [=list/contain=]
+        |provider|'s {{IdentityProviderConfig/clientId}}, return
+        [=compute the connection status/disconnected=].
     1. Let |configUrl| be the result of running [=parse url=] with |provider|'s
         {{IdentityProviderConfig/configURL}} and |globalObject|.
     1. Let |idpOrigin| be the [=url/origin=] corresponding to |configUrl|.