You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: draft-ietf-oauth-attestation-based-client-auth.md
+5-5Lines changed: 5 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -582,7 +582,7 @@ The approach using a challenge explicitly provided by the Authorization Server g
582
582
583
583
The Authorization Server SHOULD communicate support and requirement for authentication with Attestation-Based Client Authentication by using the value `attest_jwt_client_auth` in the `token_endpoint_auth_methods_supported` within its published metadata.
584
584
585
-
The Authorization Server SHOULD communicate supported algorithms for client attestations by using `client_attestation_alg_values_supported` and `client_attestation_pop_alg_values_supported` within its published metadata. This enables the client to validate that its client attestation is understood by the Authorization Server prior to authentication. The client MAY try to get a new client attestation with different algorithms.
585
+
The Authorization Server SHOULD communicate supported algorithms for client attestations by using `client_attestation_signing_alg_values_supported` and `client_attestation_pop_signing_alg_values_supported` within its published metadata. This enables the client to validate that its client attestation is understood by the Authorization Server prior to authentication. The client MAY try to get a new client attestation with different algorithms.
586
586
587
587
# Appendix A IANA Considerations
588
588
@@ -615,12 +615,12 @@ This specification requests registration of the following values in the IANA "OA
615
615
616
616
This specification requests registration of the following values in the IANA "OAuth Authorization Server Metadata" registry of {{IANA.OAuth.Params}} established by [RFC8414].
* Metadata Description: JSON array containing a list of algorithms supported by the authorization server for client attestation proof of possession signing
625
625
* Change Controller: IETF
626
626
* Reference: this specification
@@ -647,7 +647,7 @@ This section requests registration of the following scheme in the "Hypertext Tra
647
647
* Reference: [](#headers) of this specification
648
648
649
649
<br/>
650
-
650
+
add implementation consideration for Authorization Server Metadata
651
651
* Field Name: OAuth-Client-Attestation-Challenge
652
652
* Status: permanent
653
653
* Reference: [](#challenge-retrieval) of this specification
@@ -659,7 +659,7 @@ This section requests registration of the following scheme in the "Hypertext Tra
659
659
660
660
* require `iat` in Client Attestation PoP JWT
661
661
* clarify `use_attestation_challenge` and add `invalid_client_attestation`
662
-
* add `client_attestation_alg_values_supported` and `client_attestation_pop_alg_values_supported` to IANA registration
662
+
* add `client_attestation_signing_alg_values_supported` and `client_attestation_pop_signing_alg_values_supported` to IANA registration
663
663
* add implementation consideration for Authorization Server Metadata
0 commit comments