Update draft-parecki-oauth-client-id-metadata-document.md

Co-authored-by: Emelia Smith <[email protected]>

Author: aaronpk

draft-parecki-oauth-client-id-metadata-document.md

@@ -151,8 +151,7 @@ the client to the user in an authorization consent screen, for example the
 client name and logo.
 
 The authorization server SHOULD fetch the document indicated by the `client_id`
-to retrieve the client registration information. The authorization server
-MUST NOT follow HTTP redirects when fetching the Client Metadata.
+to retrieve the client registration information. A successful response MUST use the 200 OK HTTP status code and return a JSON object using the `application/json` or `application/<AS-defined>+json` content type. The authorization server MUST treat all other HTTP status codes and content types as an error response. The authorization server MUST NOT automatically follow redirects given via the Location header in responses.
 
 ## Client Metadata