[Openid-specs-ab] What does "Token Request" refer to in the Signatures and Encryption section?

John Bradley ve7jtb at ve7jtb.com
Fri Oct 11 11:29:08 UTC 2013


I think it is attempting to refer to the assertion profile for the token endpoint.  It is non normative and probably adds more to confusion.  

Leaving it out is fine.  

Sent from my iPhone

> On Oct 11, 2013, at 12:21 AM, Mike Jones <Michael.Jones at microsoft.com> wrote:
> 
> http://openid.net/specs/openid-connect-core-1_0-12.html#sigenc says:
>  
> Depending on the transport through which the messages are sent, the integrity of the message might not be guaranteed and the originator of the message might not be authenticated. To mitigate  these risks, Request Object, Token Request, ID Token, and UserInfo Response values MAY utilize [JWS] to sign the contents.
> 
> To achieve message confidentiality, Request Object, Token Request, ID Token, and UserInfo Response values MAY use [JWE] to encrypt the content.
> 
> A Token Request, used other places in the spec, just refers to a request made to the Token Endpoint – which I know of no way to sign or encrypt.  We do say how you can sign a JWT used with the private_key_jwt client authentication method, but that’s about as close to a match as I could come up with.
>  
> Should I just delete these odd uses of Token Request, or does someone want to supply alternative wording that makes sense?
>  
>                                                                 Thanks,
>                                                                 -- Mike
>  
> _______________________________________________
> Openid-specs-ab mailing list
> Openid-specs-ab at lists.openid.net
> http://lists.openid.net/mailman/listinfo/openid-specs-ab
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20131011/f435be6e/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2915 bytes
Desc: not available
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20131011/f435be6e/attachment-0001.p7s>


More information about the Openid-specs-ab mailing list