Skip to content

Additional detail on 'aud' claim #141

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Oct 4, 2024
Merged

Additional detail on 'aud' claim #141

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
ec6c176
Additional detail on 'aud' claim
PieterKas Sep 27, 2024
490abac
Update draft-ietf-oauth-transaction-tokens.md
PieterKas Oct 4, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions draft-ietf-oauth-transaction-tokens.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -342,7 +342,7 @@ JWT claims as well as defines new claims. These claims are described below:
: REQUIRED The issued at time of the Txn-Token as defined in {{RFC7519}}

`aud`:
: REQUIRED This claim, defined in {{RFC7519}}, identifies the trust domain in which the Txn-Token is valid. This identifier MUST uniquely identify the trust domain.
: REQUIRED This claim, defined in {{RFC7519}}, identifies the trust domain in which the Txn-Token is valid. This identifier MUST uniquely identify the trust domain to prevent the Txn-Token from being accepted outside it's current trust domain.

`exp`:
: REQUIRED Expiry time of the Txn-Token as defined in {{RFC7519}}
Expand Down Expand Up @@ -451,8 +451,8 @@ A workload requesting a Txn-Token must provide the Transaction Token Service wit

To request a Txn-Token the workload invokes the OAuth 2.0 {{RFC6749}} token endpoint with the following parameters:

* `grant_type` REQUIRED. The value MUST be set to `urn:ietf:params:oauth:grant-type:token-exchange`
* `audience` REQUIRED. The value MUST be set to the Trust Domain name
* `grant_type` REQUIRED. The value MUST be set to `urn:ietf:params:oauth:grant-type:token-exchange`.
* `audience` REQUIRED. The value MUST be set to the trust domain name.
* `scope` REQUIRED. A space-delimited list of case-sensitive strings where the value(s) MUST represent the specific purpose or intent of the transaction.
* `requested_token_type` REQUIRED. The value MUST be `urn:ietf:params:oauth:token-type:txn_token`
* `subject_token` REQUIRED. The value MUST represent the subject of the transaction. This MAY be:
Expand Down
Loading