Re: [OAUTH-WG] Call for adoption: Token Binding for OAuth 2.0

2016-08-16 Thread Anthony Nadalin
I’m OK with the https://tools.ietf.org/html/draft-jones-oauth-token-binding-00

Re: [OAUTH-WG] Call for adoption: Token Binding for OAuth 2.0

2016-08-16 Thread Brian Campbell
Just a friendly reminder that the 'deadline' for this call for adoption is tomorrow. According to the minutes from Berlin , 13 people were in favor of adopting OAuth 2.0 Token Binding and 0 were against. On Wed, Aug 3, 2016 at 1:45 AM,

Re: [OAUTH-WG] JWS JWT Access Tokens and resource audiences

2016-08-16 Thread Sergey Beryozkin
Hi Brian Thanks, 'cid' is a proper compact name :-), I've made our code configurable - to support reporting a client_id property either as a 'client_id' or 'cid' claim. Cheers, Sergey On 12/08/16 23:30, Brian Campbell wrote: Yeah, the client typically isn't the/an audience of an access toke