Mike Jones: self-issued

Musings on Digital Identity

Month: March 2014

JOSE -25 drafts fixing typos and updating references

By

On March 31, 2014

In Cryptography, JSON, Specifications

IETF logoJOSE -25 drafts have been released that fix a few typos and update the WebCrypto reference to refer to the W3C Last Call draft.

The specifications are available at:

HTML formatted versions are also available at:

Thanks to Antonio Sanso for bringing the typos to our attention.

Growing list of OpenID Connect libraries available

By

On March 20, 2014

In Claims, Cryptography, Federation, JSON, OpenID, Software

OpenID logoAs described in today’s openid.net post, a growing list of OpenID Connect and JWT/JOSE libraries are available. Check them out at http://openid.net/developers/libraries/.

OAuth Assertions drafts updating spec references

By

On March 19, 2014

In Claims, JSON, OAuth, Specifications

OAuth logoI’ve released updated versions of the OAuth Assertions, OAuth SAML Assertion Profile, and OAuth JWT Assertion Profile specs that use current citations for the other specs they reference, including the JSON, JWT, OAuth Dynamic Registration, and OpenID Connect specs. I also improved the formatting of hanging lists. There were no content changes.

The specifications are available at:

HTML formatted versions are also available at:

JOSE -24 and JWT -19 drafts fixing errors found in examples

By

On March 18, 2014

In Claims, Cryptography, JSON, OAuth, Specifications

IETF logoJOSE -24 drafts have been released that fix two errors found in example values. The JWT -19 draft clarifies that support for Nested JWTs is optional. The JSON reference was also updated to RFC 7159 in all drafts.

The specifications are available at:

HTML formatted versions are also available at:

Thanks to Edmund Jay and Hideki Nara for finding the bugs in the examples.

JWT -18 addressing remaining WGLC comments

By

On March 3, 2014

In Claims, Cryptography, JSON, OAuth, Specifications

IETF logoDraft -18 of the JSON Web Token (JWT) spec has been released, which addresses the few remaining outstanding comments from Working Group Last Call (WGLC). All edits were clarifications, rather than normative changes. See the Document History appendix for a description of the changes made.

New -23 versions of the JSON Object Signing and Encryption (JOSE) specs were also released since one clarification made to JWT also applied to JWS.

The specifications are available at:

HTML formatted versions are also available at:

JOSE -22 drafts fixing requirements language nits

By

On March 2, 2014

In Claims, Cryptography, JSON, OAuth, Specifications

IETF logoUpdated JOSE and JWT drafts have been published that fix a few instances of incorrect uses of RFC 2119 requirements language, such as changing an occurrence of “MUST not” to “MUST NOT”. These drafts also reference the newly completed JSON specification — RFC 7158.

The specifications are available at:

HTML formatted versions are also available at:

Powered by WordPress & Theme by Anders Norén