[Openid-specs-ab] Id_token signature type
ve7jtb at ve7jtb.com
Fri Apr 22 20:35:34 UTC 2011
I think that works. So a parameter to the token endpoint.
On 2011-04-22, at 11:53 AM, Breno de Medeiros wrote:
> Another topic discussed during last meeting of the OpenID ABC WG was
> how a relying party would indicate that the id_token should be
> symmetrically versus asymmetrically signed.
> A concrete proposal would be to add a parameter, say
> algorithm=<standard algorithm name>, where <standard algorithm name>
> is one of the possible defined values for 'alg' in the JWT.
> This parameter would be sent to the endpoint that returns the access_token.
> Openid-specs-ab mailing list
> Openid-specs-ab at lists.openid.net
More information about the Openid-specs-ab