[OAUTH-WG] JSON Web Token Best Current Practices draft describing Explicit Typing

2017-07-04 Thread Mike Jones
The JWT BCP draft has been updated to describe the use of explicit typing of JWTs as one of the ways to prevent confusion among different kinds of JWTs. This is accomplished by including an explicit type for the JWT in the "typ" header parameter. For instance, the Security Event Token (SET) s

Re: [OAUTH-WG] JSON Web Token Best Current Practices draft describing Explicit Typing

2017-07-04 Thread Phil Hunt (IDM)
+1 Thanks Mike. Phil > On Jul 4, 2017, at 12:43 PM, Mike Jones wrote: > > The JWT BCP draft has been updated to describe the use of explicit typing of > JWTs as one of the ways to prevent confusion among different kinds of JWTs. > This is accomplished by including an explicit type for the