[OpenID-specs-EAP] FW: OAuth and OpenID Connect Token Binding specs updated

Mike Jones Michael.Jones at microsoft.com
Fri Oct 27 01:49:51 UTC 2017



From: Mike Jones
Sent: Thursday, October 26, 2017 6:49 PM
To: oauth at ietf.org
Subject: OAuth and OpenID Connect Token Binding specs updated

The OAuth 2.0 Token Binding specification has been updated to enable Token Binding of JWT Authorization Grants and JWT Client Authentication.  The discussion of phasing in Token Binding was improved and generalized.  See the Document History section for other improvements applied.

The specification is available at:

  *   https://tools.ietf.org/html/draft-ietf-oauth-token-binding-05

An HTML-formatted version is also available at:

  *   http://self-issued.info/docs/draft-ietf-oauth-token-binding-05.html

An update to the closely-related OpenID Connect Token Bound Authentication 1.0 specification was also simultaneously published.  Its discussion of phasing in Token Binding was correspondingly updated.

The OpenID Connect Token Binding specification is available in HTML and text versions at:

  *   http://openid.net/specs/openid-connect-token-bound-authentication-1_0-02.html
  *   http://openid.net/specs/openid-connect-token-bound-authentication-1_0-02.txt

Thanks to Brian Campbell for doing the bulk of the editing for both sets of revisions.

                                                                -- Mike

P.S.  This note was also published at http://self-issued.info/?p=1740 and as @selfissued<https://twitter.com/selfissued>.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-eap/attachments/20171027/528e67ef/attachment.html>


More information about the Openid-specs-eap mailing list