Skip to content

Commit 0ef45b4

Browse files
committed
add "signing" to the metadata entries
1 parent 6ed0631 commit 0ef45b4

File tree

1 file changed

+5
-5
lines changed

1 file changed

+5
-5
lines changed

draft-ietf-oauth-attestation-based-client-auth.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -582,7 +582,7 @@ The approach using a challenge explicitly provided by the Authorization Server g
582582

583583
The Authorization Server SHOULD communicate support and requirement for authentication with Attestation-Based Client Authentication by using the value `attest_jwt_client_auth` in the `token_endpoint_auth_methods_supported` within its published metadata.
584584

585-
The Authorization Server SHOULD communicate supported algorithms for client attestations by using `client_attestation_alg_values_supported` and `client_attestation_pop_alg_values_supported` within its published metadata. This enables the client to validate that its client attestation is understood by the Authorization Server prior to authentication. The client MAY try to get a new client attestation with different algorithms.
585+
The Authorization Server SHOULD communicate supported algorithms for client attestations by using `client_attestation_signing_alg_values_supported` and `client_attestation_pop_signing_alg_values_supported` within its published metadata. This enables the client to validate that its client attestation is understood by the Authorization Server prior to authentication. The client MAY try to get a new client attestation with different algorithms.
586586

587587
# Appendix A IANA Considerations
588588

@@ -615,12 +615,12 @@ This specification requests registration of the following values in the IANA "OA
615615

616616
This specification requests registration of the following values in the IANA "OAuth Authorization Server Metadata" registry of {{IANA.OAuth.Params}} established by [RFC8414].
617617

618-
* Metadata Name: client_attestation_alg_values_supported
618+
* Metadata Name: client_attestation_signing_alg_values_supported
619619
* Metadata Description: JSON array containing a list of algorithms supported by the authorization server for client attestation signing
620620
* Change Controller: IETF
621621
* Reference: [](#checking-http-requests-with-client-attestations) of this specification
622622

623-
* Metadata Name: client_attestation_pop_alg_values_supported
623+
* Metadata Name: client_attestation_pop_signing_alg_values_supported
624624
* Metadata Description: JSON array containing a list of algorithms supported by the authorization server for client attestation proof of possession signing
625625
* Change Controller: IETF
626626
* Reference: this specification
@@ -647,7 +647,7 @@ This section requests registration of the following scheme in the "Hypertext Tra
647647
* Reference: [](#headers) of this specification
648648

649649
<br/>
650-
650+
add implementation consideration for Authorization Server Metadata
651651
* Field Name: OAuth-Client-Attestation-Challenge
652652
* Status: permanent
653653
* Reference: [](#challenge-retrieval) of this specification
@@ -659,7 +659,7 @@ This section requests registration of the following scheme in the "Hypertext Tra
659659

660660
* require `iat` in Client Attestation PoP JWT
661661
* clarify `use_attestation_challenge` and add `invalid_client_attestation`
662-
* add `client_attestation_alg_values_supported` and `client_attestation_pop_alg_values_supported` to IANA registration
662+
* add `client_attestation_signing_alg_values_supported` and `client_attestation_pop_signing_alg_values_supported` to IANA registration
663663
* add implementation consideration for Authorization Server Metadata
664664

665665
-06

0 commit comments

Comments
 (0)