Skip to content

draft-ietf-oauth-identity-chaining-04

Compare
Choose a tag to compare
@arndt-s arndt-s released this 27 Feb 12:23
· 18 commits to main since this release
ffb7d9d

-04

Clarified diagrams and description of authorization server acting as a client.
Remove references to sd-jwt.
Added text to recommend use of explicit typing.
Added security consideration on preventing lateral moves.
Editorial updates to be consistent about the trust domain for a client, authorization server or resource server.
Added sender constraining of tokens to security considerations