[Openid-specs-ab] Issue #1815: [Federation] Resolve response: JWT typing language not clear enough (openid/connect)
Vladimir Dzhuvinov
issues-reply at bitbucket.org
Fri Feb 10 06:57:43 UTC 2023
New issue 1815: [Federation] Resolve response: JWT typing language not clear enough
https://bitbucket.org/openid/connect/issues/1815/federation-resolve-response-jwt-typing
Vladimir Dzhuvinov:
Spec link: [https://openid.net/specs/openid-connect-federation-1\_0.html#name-resolve-response](https://openid.net/specs/openid-connect-federation-1_0.html#name-resolve-response)
> A successful response MUST use the HTTP status code 200 and the content type set to `application/resolve-response+jwt`, containing resolved metadata and verified Trust Marks.
There is no explicit normative language that the JWT must be typed.
More information about the Openid-specs-ab
mailing list