Hi, This has been brought up before - but no response.
Either I can’t find it - or it is missing. But is the setting the JWT typ explicitly mentioned somewhere? I think it should to prevent cross JWT confusion. Thanks ——— Dominick Baier
_______________________________________________ OAuth mailing list OAuth@ietf.org https://www.ietf.org/mailman/listinfo/oauth