The OpenID Connect Token Bound Authentication specification has been updated in response to developer feedback and in anticipation of the IETF Token Binding specifications finishing. Changes were:
- Adjusted the metadata to indicate supported confirmation method hash algorithms for Token Binding IDs in ID Tokens.
- Updated references for draft-ietf-tokbind-protocol to -19, draft-ietf-tokbind-https to -17, draft-ietf-oauth-token-binding to -07, and draft-ietf-oauth-discovery to -10.
- Explicitly stated that the base64url encoding of the “
tbh” value doesn’t include any trailing pad characters, line breaks, whitespace, etc.
(The representation of the Token Binding ID in the ID Token is unchanged.)
Thanks to Brian Campbell for doing the editing for this draft.
The specification is available at:
Leave a Reply
You must be logged in to post a comment.