Hello, about the mentioned content-types in the current draft *jwsreq-16*
in *section-10.4.1* - says to check the content type of the response is "application/jose" I believe this should be application/jwt instead in *section-10.4.2* - says to check the content type of the response is "application/json" I believe this should be application/jwt too Both to be in line with the example of fetch response from *section-5.2.3 * Best, *Filip Skokan*
_______________________________________________ OAuth mailing list OAuth@ietf.org https://www.ietf.org/mailman/listinfo/oauth
