Hi, I have another thought about processing the ID-JAG... The ID-JAG is a grant. As such, shouldn't it support RAR (RFC 9396 <https://datatracker.ietf.org/doc/html/rfc9396#name-authorization-request>)? For example, add authorization_details as an optional claim in the list of claims in section 3 and as a parameter to the relevant request and responses.
Best regards, Judith
_______________________________________________ OAuth mailing list -- [email protected] To unsubscribe send an email to [email protected]
