You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
* add authorization server metadata
adds authorization server metadata property to indicate which token types are supported in a token exchange request. closes#147
* fix token types supported description
* `identity_chaining_requested_token_types_supported`
clarify requested token type, not subject token type
* reword `identity_chaining_requested_token_types_supported`
from Pieter's feedback
Copy file name to clipboardExpand all lines: draft-ietf-oauth-identity-chaining.md
+25Lines changed: 25 additions & 0 deletions
Original file line number
Diff line number
Diff line change
@@ -287,8 +287,32 @@ The authorization server in Domain A transcribes the claims in the JWT authoriza
287
287
288
288
The representation of transcribed claims and their format is not defined in this specification.
289
289
290
+
# Authorization Server Metadata {#authorization-server-metadata}
291
+
292
+
The following authorization server metadata parameter is defined by this specification and is registered in the "OAuth Authorization Server Metadata" registry established in "OAuth 2.0 Authorization Server Metadata" {{RFC8414}}.
293
+
294
+
{:vspace}
295
+
identity_chaining_requested_token_types_supported
296
+
: OPTIONAL. JSON array containing a list of Token Types that can be requested as a `requested_token_type` in the Token Exchange request when performing Identity and Authorization Chaining Across Domains. Authorization servers MAY choose not to advertise some supported requested token types even when this parameter is used, and lack of a value does not necessarily mean that the token type is unsupported.
297
+
298
+
290
299
# IANA Considerations {#IANA}
291
300
301
+
## OAuth Authorization Server Metadata Registry
302
+
303
+
This specification defines the following parameter in the "OAuth Authorization Server Metadata" registry established in {{RFC8414}}.
* Metadata Description: JSON array containing a list of Token Type Identifiers supported as a `requested_token_type` in an Identity and Authorization Chaining Token Exchange ({{RFC8693}}) request.
0 commit comments