[Openid-specs-ab] FW: Updated OAuth JWT Bearer Token Profile and OAuth Assertion Profile specs
Mike Jones
Michael.Jones at microsoft.com
Tue Nov 1 00:30:41 UTC 2011
From: oauth-bounces at ietf.org [mailto:oauth-bounces at ietf.org] On Behalf Of Mike Jones
Sent: Monday, October 31, 2011 5:29 PM
To: oauth at ietf.org
Subject: [OAUTH-WG] Updated OAuth JWT Bearer Token Profile and OAuth Assertion Profile specs
I updated the OAuth JWT Bearer Token Profile<http://self-issued.info/docs/draft-jones-oauth-jwt-bearer.html> spec to track the changes made in the OAuth SAML Bearer Token Profile<http://tools.ietf.org/html/draft-ietf-oauth-saml2-bearer> spec.
draft-jones-oauth-jwt-bearer-01<http://self-issued.info/docs/draft-jones-oauth-jwt-bearer-01.html>
* Merged in changes from draft-ietf-oauth-saml2-bearer-09. In particular, this draft now uses draft-ietf-oauth-assertions, rather than being standalone. It also now defines how to use JWT bearer tokens both for Authorization Grants and for Client Authentication.
Meanwhile, Chuck Mortimore updated the OAuth Assertion Profile<http://tools.ietf.org/html/draft-ietf-oauth-assertions-01> spec to incorporate working group feedback. In particular, the client_id parameter is now optional, as in some cases it may be carried in the assertion, rather than as a parameter.
The specs are available in the standard places. The HTML versions can be found at these locations:
* http://tools.ietf.org/html/draft-jones-oauth-jwt-bearer-01
* http://tools.ietf.org/html/draft-ietf-oauth-assertions-01
* http://self-issued.info/docs/draft-jones-oauth-jwt-bearer-01.html
Feedback welcome!
-- Mike
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20111101/80eb178b/attachment.html>
More information about the Openid-specs-ab
mailing list