Re: [OAUTH-WG] Mail regarding draft-ietf-oauth-jwsreq

2018-11-01 Thread John Bradley
sign and > thus part of the OAuth registry? > > > > Jim > > > > > > *From:* Mike Jones > *Sent:* Wednesday, October 31, 2018 9:18 AM > *To:* Jim Schaad ; > draft-ietf-oauth-jws...@ietf.org > *Cc:* 'oauth' > *Subject:* RE: [OAUTH-WG] Mail reg

Re: [OAUTH-WG] Mail regarding draft-ietf-oauth-jwsreq

2018-11-01 Thread Jim Schaad
base OAuth design and thus part of the OAuth registry? Jim From: Mike Jones Sent: Wednesday, October 31, 2018 9:18 AM To: Jim Schaad ; draft-ietf-oauth-jws...@ietf.org Cc: 'oauth' Subject: RE: [OAUTH-WG] Mail regarding draft-ietf-oauth-jwsreq JWT defines a number of stand

Re: [OAUTH-WG] Mail regarding draft-ietf-oauth-jwsreq

2018-10-31 Thread Mike Jones
JWT defines a number of standard claims that are used in this application, including "iss" (issuer), "aud" (audience), etc. Making the requests a JWT allows code reuse, rather than having an application-specific signed request representation that has many of the semantics and fields of a JWT an