[Openid-specs-ab] Issue #2128: [Federation] The federation_trust_mark_endpoint requires a "sub" request parameter (openid/connect)

Vladimir Dzhuvinov issues-reply at bitbucket.org
Wed Mar 6 21:08:50 UTC 2024


New issue 2128: [Federation] The federation_trust_mark_endpoint requires a "sub" request parameter
https://bitbucket.org/openid/connect/issues/2128/federation-the

Vladimir Dzhuvinov:

In a recent spec update `private_key_jwt` authentication at the Trust Mark endpoint was made optional. Previously the JWT `sub` claim was used to determine the Trust Mark subject. Now we are going to need an explicit `sub` parameter to convey the subject, designated as REQUIRED.

[https://openid.bitbucket.io/connect/openid-federation-1\_0.html#tm\_endpoint](https://openid.bitbucket.io/connect/openid-federation-1_0.html#tm_endpoint)


More information about the Openid-specs-ab mailing list