Re: [OAUTH-WG] About JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens

2021-04-06 Thread Thibault Normand
To: oauth > Subject: [OAUTH-WG] About JSON Web Token (JWT) Profile for OAuth 2.0 Access > Tokens > > Hi, > By reading this draft > (https://tools.ietf.org/html/draft-ietf-oauth-access-token-jwt-05) I got > the > impression that it implies using JWTs as bearer tokens, e.

Re: [OAUTH-WG] About JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens

2021-04-02 Thread vittorio . bertocci=40auth0 . com
oauth Subject: [OAUTH-WG] About JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens Hi, By reading this draft (https://tools.ietf.org/html/draft-ietf-oauth-access-token-jwt-05) I got the impression that it implies using JWTs as bearer tokens, e.g., it does consider any of the semantics defin

[OAUTH-WG] About JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens

2021-04-01 Thread Nikos Fotiou
Hi, By reading this draft (https://tools.ietf.org/html/draft-ietf-oauth-access-token-jwt-05) I got the impression that it implies using JWTs as bearer tokens, e.g., it does consider any of the semantics defined in RFC7800. Is this correct? If yes what was the rational behind this design choice?