[Openid-specs-ab] Issue #1815: [Federation] Resolve response: JWT typing language not clear enough (openid/connect)

Vladimir Dzhuvinov issues-reply at bitbucket.org
Fri Feb 10 06:57:43 UTC 2023


New issue 1815: [Federation] Resolve response: JWT typing language not clear enough
https://bitbucket.org/openid/connect/issues/1815/federation-resolve-response-jwt-typing

Vladimir Dzhuvinov:

Spec link: [https://openid.net/specs/openid-connect-federation-1\_0.html#name-resolve-response](https://openid.net/specs/openid-connect-federation-1_0.html#name-resolve-response)

> A successful response MUST use the HTTP status code 200 and the content type set to `application/resolve-response+jwt`, containing resolved metadata and verified Trust Marks.

There is no explicit normative language that the JWT must be typed.


More information about the Openid-specs-ab mailing list