I think this should stay as REQUIRED.

On Wed, Mar 4, 2026 at 11:08 AM RFC Errata System <[email protected]>
wrote:

> The following errata report has been submitted for RFC9068,
> "JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens".
>
> --------------------------------------
> You may review the report below and at:
> https://www.rfc-editor.org/errata/eid8802
>
> --------------------------------------
> Type: Technical
> Reported by: David Hermo Blanco <[email protected]>
>
> Section: 2.2
>
> Original Text
> -------------
> iss  REQUIRED - as defined in Section 4.1.1 of [RFC7519].
>
>
> Corrected Text
> --------------
> iss  OPTIONAL - as defined in Section 4.1.1 of [RFC7519].
>
>
> Notes
> -----
> rfc7519:
> 4.1.1.  "iss" (Issuer) Claim
>
>    The "iss" (issuer) claim identifies the principal that issued the
>    JWT.  The processing of this claim is generally application specific.
>    The "iss" value is a case-sensitive string containing a StringOrURI
>    value.  Use of this claim is OPTIONAL.
>
> Instructions:
> -------------
> This erratum is currently posted as "Reported". (If it is spam, it
> will be removed shortly by the RFC Production Center.) Please
> use "Reply All" to discuss whether it should be verified or
> rejected. When a decision is reached, the verifying party
> will log in to change the status and edit the report, if necessary.
>
> --------------------------------------
> RFC9068 (draft-ietf-oauth-access-token-jwt-13)
> --------------------------------------
> Title               : JSON Web Token (JWT) Profile for OAuth 2.0 Access
> Tokens
> Publication Date    : October 2021
> Author(s)           : V. Bertocci
> Category            : PROPOSED STANDARD
> Source              : Web Authorization Protocol
> Stream              : IETF
> Verifying Party     : IESG
>
> _______________________________________________
> OAuth mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
>
_______________________________________________
OAuth mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to