[OAUTH-WG] MTLS token endoint & discovery

2019-02-09 Thread Dominick Baier
We are currently implementing MTLS in IdentityServer. Our approach will be that we’ll offer a separate token endpoint that supports client certs. Are you planning on adding an official endpoint name for discovery? Right now we are using “mtls_token_endpoint”.. Thanks ——— Dominick On 7. February

Re: [OAUTH-WG] [Ace] Resource, Audience, and req_aud

2019-02-09 Thread Benjamin Kaduk
On Thu, Feb 07, 2019 at 02:28:02PM -0700, Brian Campbell wrote: > > The token-exchange draft defines both the "resource" and "audience" > parameters for use in the context of a > "urn:ietf:params:oauth:grant-type:token-exchange" grant type request to the > token endpoint. There is a lot of overlap