|
26 | 26 |
|
27 | 27 | <front> |
28 | 28 | <title abbrev="OpenID Federation">OpenID Federation 1.0 - |
29 | | - draft 47 |
| 29 | + draft 48 |
30 | 30 | </title> |
31 | 31 |
|
32 | 32 | <author fullname="Roland Hedberg" initials="R." role="editor" |
|
78 | 78 | </address> |
79 | 79 | </author> |
80 | 80 |
|
81 | | - <date day="20" month="January" year="2026"/> |
| 81 | + <date day="1" month="February" year="2026"/> |
82 | 82 |
|
83 | 83 | <workgroup>OpenID Connect Working Group</workgroup> |
84 | 84 |
|
|
232 | 232 | by <xref target="OpenID.Core">OpenID Connect Core 1.0</xref>, and |
233 | 233 | the terms "Authorization Endpoint", "Authorization Server (AS)", |
234 | 234 | "Client", "Client Authentication", "Client Identifier", "Client Secret", |
235 | | - "Grant Type", "Protected Resource", "Redirection URI", "Refresh Token", |
| 235 | + "Protected Resource", "Redirection URI", "Refresh Token", |
236 | 236 | "Resource Server (RS)", and "Token Endpoint" |
237 | 237 | defined by <xref target="RFC6749">OAuth 2.0</xref>. |
238 | 238 |
|
|
1117 | 1117 | </t> |
1118 | 1118 | <t hangText="Leaf"> |
1119 | 1119 | <vspace/> |
1120 | | - In an OpenID Connect identity federation, an RP or an OP, |
| 1120 | + An Entity with no Subordinate Entities, |
| 1121 | + which typically plays a protocol role. |
| 1122 | + For instance, in an OpenID Connect identity federation, an RP or an OP, |
1121 | 1123 | or in an OAuth 2.0 federation, a Client, Authorization Server, or Protected Resource. |
1122 | 1124 | </t> |
1123 | 1125 | <t hangText="Intermediate"> |
|
1422 | 1424 | <t> |
1423 | 1425 | The Entity Type Identifier uniquely identifies the Entity Type of a |
1424 | 1426 | federation participant and the metadata format for that Entity Type. This |
1425 | | - section defines a <spanx style="verb">federation_entity</spanx> Entity |
| 1427 | + section defines the <spanx style="verb">federation_entity</spanx> Entity |
1426 | 1428 | Type Identifier as well as identifiers for OpenID Connect and OAuth 2.0 |
1427 | 1429 | Federation Entities. |
1428 | 1430 | </t> |
1429 | 1431 | <t> |
1430 | 1432 | Additional Entity Type Identifiers MAY be defined to |
1431 | | - support use cases outside OpenID Connect and OAuth 2.0 federations. |
| 1433 | + support use cases for other protocols. |
1432 | 1434 | </t> |
1433 | 1435 |
|
1434 | 1436 | <section anchor="federation_entity" title="Federation Entity"> |
@@ -6733,7 +6735,7 @@ GET /authorize? |
6733 | 6735 | a client authentication method for the PAR endpoint |
6734 | 6736 | MUST be used that proves possession of one of the RP's private keys. |
6735 | 6737 | Furthermore, the corresponding public key MUST be in the |
6736 | | - Entity's RP JWK Set. |
| 6738 | + Entity's RP JWK Set <xref target="RFC7517"/>. |
6737 | 6739 | </t> |
6738 | 6740 | <t> |
6739 | 6741 | The two applicable PAR client authentication methods are: |
@@ -7433,8 +7435,9 @@ HTTP/1.1 302 Found |
7433 | 7435 | value in the response MUST be |
7434 | 7436 | <spanx style="verb">explicit-registration-response+jwt</spanx> |
7435 | 7437 | (and not <spanx style="verb">entity-statement+jwt</spanx>) |
7436 | | - to prevent confusion between the Explicit Registration response |
7437 | | - and other kinds of Entity Statements. |
| 7438 | + to prevent cross-JWT confusion between the Explicit Registration response |
| 7439 | + and other kinds of Entity Statements, |
| 7440 | + per Section 3.11 of <xref target="RFC8725"/>. |
7438 | 7441 | </t> |
7439 | 7442 | </section> |
7440 | 7443 |
|
@@ -10405,7 +10408,7 @@ HTTP/1.1 302 Found |
10405 | 10408 | </address> |
10406 | 10409 | </author> |
10407 | 10410 |
|
10408 | | - <date day="20" month="January" year="2026"/> |
| 10411 | + <date day="1" month="February" year="2026"/> |
10409 | 10412 | </front> |
10410 | 10413 | </reference> |
10411 | 10414 |
|
@@ -10461,7 +10464,7 @@ HTTP/1.1 302 Found |
10461 | 10464 | </address> |
10462 | 10465 | </author> |
10463 | 10466 |
|
10464 | | - <date day="20" month="January" year="2026"/> |
| 10467 | + <date day="1" month="February" year="2026"/> |
10465 | 10468 | </front> |
10466 | 10469 | </reference> |
10467 | 10470 |
|
@@ -11677,6 +11680,15 @@ Host: op.umu.se |
11677 | 11680 | <section anchor="History" title="Document History"> |
11678 | 11681 | <t>[[ To be removed from the final specification ]]</t> |
11679 | 11682 |
|
| 11683 | + <t> |
| 11684 | + -48 |
| 11685 | + <list style="symbols"> |
| 11686 | + <t> |
| 11687 | + Applied editorial improvements originally made in the 1.1 specifications. |
| 11688 | + </t> |
| 11689 | + </list> |
| 11690 | + </t> |
| 11691 | + |
11680 | 11692 | <t> |
11681 | 11693 | -47 |
11682 | 11694 | <list style="symbols"> |
|
0 commit comments