Skip to content

Commit 229be32

Browse files
authored
add authorization server metadata (#164)
* add authorization server metadata adds authorization server metadata property to indicate which token types are supported in a token exchange request. closes #147 * fix token types supported description * `identity_chaining_requested_token_types_supported` clarify requested token type, not subject token type * reword `identity_chaining_requested_token_types_supported` from Pieter's feedback
1 parent d6b8a51 commit 229be32

File tree

1 file changed

+25
-0
lines changed

1 file changed

+25
-0
lines changed

draft-ietf-oauth-identity-chaining.md

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -287,8 +287,32 @@ The authorization server in Domain A transcribes the claims in the JWT authoriza
287287

288288
The representation of transcribed claims and their format is not defined in this specification.
289289

290+
# Authorization Server Metadata {#authorization-server-metadata}
291+
292+
The following authorization server metadata parameter is defined by this specification and is registered in the "OAuth Authorization Server Metadata" registry established in "OAuth 2.0 Authorization Server Metadata" {{RFC8414}}.
293+
294+
{:vspace}
295+
identity_chaining_requested_token_types_supported
296+
: OPTIONAL. JSON array containing a list of Token Types that can be requested as a `requested_token_type` in the Token Exchange request when performing Identity and Authorization Chaining Across Domains. Authorization servers MAY choose not to advertise some supported requested token types even when this parameter is used, and lack of a value does not necessarily mean that the token type is unsupported.
297+
298+
290299
# IANA Considerations {#IANA}
291300

301+
## OAuth Authorization Server Metadata Registry
302+
303+
This specification defines the following parameter in the "OAuth Authorization Server Metadata" registry established in {{RFC8414}}.
304+
305+
### Registry Contents
306+
307+
* Metadata Name: `identity_chaining_requested_token_types_supported`
308+
* Metadata Description: JSON array containing a list of Token Type Identifiers supported as a `requested_token_type` in an Identity and Authorization Chaining Token Exchange ({{RFC8693}}) request.
309+
* Change Controller: IETF
310+
* Specification Document(s): {{authorization-server-metadata}}
311+
312+
313+
The registry records the supported token types that can be requested in an {{RFC8693}} Token Exchange.
314+
315+
292316
## Media Types
293317
This specification does not define any new media types.
294318

@@ -526,6 +550,7 @@ The editors would like to thank Joe Jubinski, Justin Richer, Dean H. Saxe, and o
526550
* Fix some toolchain complaints and other nitpicks
527551
* Added some Privacy Considerations
528552
* Move Mr. Parecki from acknowledgements to contributors in acknowledgement of his contributions
553+
* Added Authorization Server Metadata registry to publish supported Token Exchange requested token types
529554

530555
-04
531556

0 commit comments

Comments
 (0)