Re: [OAUTH-WG] WGLC for OAuth 2.0 Protected Resource Metadata

[Vladimir Dzhuvinov]

I have a question about the parameters: resource_signing_alg_values_supported, resource_encryption_alg_values_supported, resource_encryption_enc_values_supported.

Vladimir

On 27/03/2024 14:53, Rifaat Shekh-Yusef wrote:

I'm not sure how to interpret "content". Where the algorithms, if advertised, get to apply. Is this something that resources / applications will define, depending on the resource characteristics? If we take JWE for instance, it could be used for 3 things at least. To encrypt bearer JWTs to access the resource, in addition to encrypting request and response payloads.

All,


https://www.ietf.org/archive/id/draft-ietf-oauth-resource-metadata-03.html



Regards,
  Rifaat & Hannes

_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth

This is a *WG Last Call* for the *OAuth 2.0 Protected Resource Metadata* document. Please, review this document and reply on the mailing list if you have any comments or concerns, by *April 12*.

smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth