|
58 | 58 | </address> |
59 | 59 | </author> |
60 | 60 |
|
61 | | - <date day="8" month="January" year="2026" /> |
| 61 | + <date day="5" month="March" year="2026" /> |
62 | 62 |
|
63 | 63 | <workgroup>OpenID Connect Working Group</workgroup> |
64 | 64 |
|
|
223 | 223 | JSON array containing a list of the |
224 | 224 | <xref target="JWS">JWS</xref> <spanx style="verb">alg</spanx> values |
225 | 225 | supported by the RP when validating the ID Token signature. |
226 | | - If a <spanx style="verb">id_token_signed_response_alg</spanx> |
| 226 | + If an <spanx style="verb">id_token_signed_response_alg</spanx> |
227 | 227 | metadata parameter is also present, its value MUST be in the list. |
228 | 228 | </t> |
229 | 229 |
|
|
233 | 233 | JSON array containing a list of the |
234 | 234 | <xref target="JWE">JWE</xref> <spanx style="verb">alg</spanx> values |
235 | 235 | supported by the RP when decrypting the ID Token. |
236 | | - If a <spanx style="verb">id_token_encrypted_response_alg</spanx> |
| 236 | + If an <spanx style="verb">id_token_encrypted_response_alg</spanx> |
237 | 237 | metadata parameter is also present, its value MUST be in the list. |
238 | 238 | </t> |
239 | 239 |
|
|
243 | 243 | JSON array containing a list of the |
244 | 244 | JWE <spanx style="verb">enc</spanx> values |
245 | 245 | supported by the RP when decrypting the ID Token. |
246 | | - If a <spanx style="verb">id_token_encrypted_response_enc</spanx> |
| 246 | + If an <spanx style="verb">id_token_encrypted_response_enc</spanx> |
247 | 247 | metadata parameter is also present, its value MUST be in the list. |
248 | 248 | </t> |
249 | 249 |
|
|
347 | 347 | OPTIONAL. |
348 | 348 | JSON array containing a list of the |
349 | 349 | JWS <spanx style="verb">alg</spanx> values |
350 | | - supported by the Client for signed responses. |
351 | | - If a <spanx style="verb">authorization_signed_response_alg</spanx> |
| 350 | + supported by the Client for validating signed responses. |
| 351 | + If an <spanx style="verb">authorization_signed_response_alg</spanx> |
352 | 352 | metadata parameter is also present, its value MUST be in the list. |
353 | 353 | </t> |
354 | 354 |
|
|
357 | 357 | OPTIONAL. |
358 | 358 | JSON array containing a list of the |
359 | 359 | JWE <spanx style="verb">alg</spanx> values |
360 | | - supported by the Client for encrypted responses. |
361 | | - If a <spanx style="verb">authorization_encrypted_response_alg</spanx> |
| 360 | + supported by the Client for decrypting encrypted responses. |
| 361 | + If an <spanx style="verb">authorization_encrypted_response_alg</spanx> |
362 | 362 | metadata parameter is also present, its value MUST be in the list. |
363 | 363 | </t> |
364 | 364 |
|
|
367 | 367 | OPTIONAL. |
368 | 368 | JSON array containing a list of the |
369 | 369 | JWE <spanx style="verb">enc</spanx> values |
370 | | - supported by the Client for encrypted responses. |
371 | | - If a <spanx style="verb">authorization_encrypted_response_enc</spanx> |
| 370 | + supported by the Client for decrypting encrypted responses. |
| 371 | + If an <spanx style="verb">authorization_encrypted_response_enc</spanx> |
372 | 372 | metadata parameter is also present, its value MUST be in the list. |
373 | 373 | </t> |
374 | 374 |
|
|
378 | 378 | JSON array containing a list of the |
379 | 379 | JWS <spanx style="verb">alg</spanx> values |
380 | 380 | supported by the Client when validating the Introspection Response signature. |
381 | | - If a <spanx style="verb">introspection_signed_response_alg</spanx> |
| 381 | + If an <spanx style="verb">introspection_signed_response_alg</spanx> |
382 | 382 | metadata parameter is also present, its value MUST be in the list. |
383 | 383 | </t> |
384 | 384 |
|
|
388 | 388 | JSON array containing a list of the |
389 | 389 | JWE <spanx style="verb">alg</spanx> values |
390 | 390 | supported by the Client when decrypting the Introspection Response. |
391 | | - If a <spanx style="verb">introspection_encrypted_response_alg</spanx> |
| 391 | + If an <spanx style="verb">introspection_encrypted_response_alg</spanx> |
392 | 392 | metadata parameter is also present, its value MUST be in the list. |
393 | 393 | </t> |
394 | 394 |
|
|
398 | 398 | JSON array containing a list of the |
399 | 399 | JWE <spanx style="verb">enc</spanx> values |
400 | 400 | supported by the Client when decrypting the Introspection Response. |
401 | | - If a <spanx style="verb">introspection_encrypted_response_enc</spanx> |
| 401 | + If an <spanx style="verb">introspection_encrypted_response_enc</spanx> |
402 | 402 | metadata parameter is also present, its value MUST be in the list. |
403 | 403 | </t> |
404 | 404 |
|
|
482 | 482 | <section anchor="Security" title="Security Considerations"> |
483 | 483 | <t> |
484 | 484 | The security considerations when using these metadata parameters |
485 | | - are the same as those when using the correspoding metadata parameters in |
| 485 | + are the same as those when using the corresponding metadata parameters in |
486 | 486 | <xref target="OpenID.Registration"/> and <xref target="OpenID.Discovery"/> |
487 | 487 | or the other specifications in which they are defined. |
488 | 488 | </t> |
|
1182 | 1182 | <section anchor="History" title="Document History"> |
1183 | 1183 | <t>[[ To be removed from the approved Final Specification ]]</t> |
1184 | 1184 |
|
| 1185 | + <t> |
| 1186 | + -05 |
| 1187 | + <list style="symbols"> |
| 1188 | + <t> |
| 1189 | + Fixed #10: Corrected wording issues identified by Frederik Krogsdal Jacobsen. |
| 1190 | + </t> |
| 1191 | + </list> |
| 1192 | + </t> |
| 1193 | + |
1185 | 1194 | <t> |
1186 | 1195 | -04 |
1187 | 1196 | <list style="symbols"> |
|
1255 | 1264 | Vladimir Dzhuvinov, |
1256 | 1265 | Michael Fraser, |
1257 | 1266 | Joseph Heenan, |
| 1267 | + Frederik Krogsdal Jacobsen, |
1258 | 1268 | Eduardo Perottoni, |
1259 | 1269 | and |
1260 | 1270 | Stefan Santesson. |
|
0 commit comments