Re: [OAUTH-WG] Call for adoption: JWT Usage in OAuth2 Access Tokens

2019-04-13 Thread Schanzenbach, Martin
> On 10. Apr 2019, at 19:39, Sascha Preibisch wrote: > > I am late in the game, but not too late I hope. > > I would like to see 'aud' be the requesting client_id. For identifying the > the target resource, a 'resource' claim should be introduced. I am also > suggesting to not introduce 'typ

Re: [OAUTH-WG] Genart last call review of draft-ietf-oauth-jwt-bcp-04

2019-04-13 Thread Yaron Sheffer
Hi Brian, Thank you for your review! Your comments are addressed by the following commit: https://github.com/yaronf/I-D/commit/d00674b352f6e1323da8c5b6600f1f0d7e9b64b1 Please let us know if any issues remain. Best, Yaron On 30/03/2019 23:51, Brian Carpenter via Datatracker wrote: R