[Openid-specs-ab] FW: Updated OAuth JWT Bearer Token Profile and OAuth Assertion Profile specs

Mike Jones Michael.Jones at microsoft.com
Tue Nov 1 00:30:41 UTC 2011



From: oauth-bounces at ietf.org [mailto:oauth-bounces at ietf.org] On Behalf Of Mike Jones
Sent: Monday, October 31, 2011 5:29 PM
To: oauth at ietf.org
Subject: [OAUTH-WG] Updated OAuth JWT Bearer Token Profile and OAuth Assertion Profile specs

I updated the OAuth JWT Bearer Token Profile<http://self-issued.info/docs/draft-jones-oauth-jwt-bearer.html> spec to track the changes made in the OAuth SAML Bearer Token Profile<http://tools.ietf.org/html/draft-ietf-oauth-saml2-bearer> spec.
draft-jones-oauth-jwt-bearer-01<http://self-issued.info/docs/draft-jones-oauth-jwt-bearer-01.html>
*         Merged in changes from draft-ietf-oauth-saml2-bearer-09. In particular, this draft now uses draft-ietf-oauth-assertions, rather than being standalone. It also now defines how to use JWT bearer tokens both for Authorization Grants and for Client Authentication.
Meanwhile, Chuck Mortimore updated the OAuth Assertion Profile<http://tools.ietf.org/html/draft-ietf-oauth-assertions-01> spec to incorporate working group feedback.  In particular, the client_id parameter is now optional, as in some cases it may be carried in the assertion, rather than as a parameter.

The specs are available in the standard places.  The HTML versions can be found at these locations:

*         http://tools.ietf.org/html/draft-jones-oauth-jwt-bearer-01

*         http://tools.ietf.org/html/draft-ietf-oauth-assertions-01

*         http://self-issued.info/docs/draft-jones-oauth-jwt-bearer-01.html

Feedback welcome!

                                                                -- Mike

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20111101/80eb178b/attachment.html>


More information about the Openid-specs-ab mailing list