Skip to content

draft-ietf-oauth-identity-chaining-06

Latest
Compare
Choose a tag to compare
@bc-pi bc-pi released this 12 Sep 16:05
· 1 commit to main since this release
60c4894

-06

  • Use IANA.media-types so the tooling can find the media types registry without an explicit target
  • Mention that the RFC8693 token exchange is not strictly necessary, if trust domain A's platform provides other means to obtain a JWT authorization grant
  • Better describe the trust relationship necessary (domain B has to trusts domain A to issue JWT authz grants and trust its signing key(s)) and mention that AS Metadata's jwks_uri can be used to obtain the verification keys for trust domain A
  • add a note about agreeing on semantics etc. when transcribing claims
  • Editorial fixes