[Openid-specs-ab] Issue #1188: prompt=create doc references JAR rather than OIDC request object (openid/connect)

josephheenan issues-reply at bitbucket.org
Fri Sep 25 10:09:09 UTC 2020


New issue 1188: prompt=create doc references JAR rather than OIDC request object
https://bitbucket.org/openid/connect/issues/1188/prompt-create-doc-references-jar-rather

Joseph Heenan:

Raising as per the request on this week’s WG call that I review this document - section 4.1 of the prompt=create draft says:

> For authorization requests sent as a JWTs, such as when using [JWT Secured Authorization Request](https://xml2rfc.tools.ietf.org/cgi-bin/cat.cgi/.html?input=fcf163680bcc6004a674bd6dfb6fe5cef4bf014968be4a228f431a48-1601027397#I-D.ietf-oauth-jwsreq), the prompt claim value MUST be a space delimited set of prompt values in keeping with Section 3.1.2.1 of [OpenID Connect Core 1.0](https://xml2rfc.tools.ietf.org/cgi-bin/cat.cgi/.html?input=fcf163680bcc6004a674bd6dfb6fe5cef4bf014968be4a228f431a48-1601027397#OpenID.Core).

I was surprised that this gave JAR as the example, rather than section 6 of OIDCC.




More information about the Openid-specs-ab mailing list