diff --git a/openid-connect-rp-metadata-choices-1_0.xml b/openid-connect-rp-metadata-choices-1_0.xml index 516114b..e1e4430 100644 --- a/openid-connect-rp-metadata-choices-1_0.xml +++ b/openid-connect-rp-metadata-choices-1_0.xml @@ -13,6 +13,7 @@ be taken to indicate. --> @@ -57,7 +58,7 @@ - + OpenID Connect Working Group @@ -313,6 +314,8 @@ Client Authentication methods supported by the Client. If a token_endpoint_auth_method metadata parameter is also present, its value MUST be in the list. + Also see the discussion of this parameter in + . @@ -416,6 +419,39 @@ +
+ + The token_endpoint_auth_methods_supported + metadata value is used, in practice, to indicate the + Client Authentication Methods supported at any Authorization Server endpoint, + not just the Token Endpoint. + For instance, these same methods MUST be supported at + the Revocation Endpoint , + the Introspection Endpoint , and + the Pushed Authorization Request Endpoint , + when they exist. + + + It is a consensus position within the OpenID Connect working group that + it was a mistake to create separate + revocation_endpoint_auth_methods_supported and + introspection_endpoint_auth_methods_supported + Authorization Server Metadata parameters in . + This aligns with the decision by the OAuth Working group to use the + token_endpoint_auth_methods_supported and + token_endpoint_auth_method metadata parameters + to describe the capabilities of the + Pushed Authorization Request (PAR) Endpoint , + rather than creating new parameters that were PAR-specific. + + + Consequently, this specification does not create + revocation_endpoint_auth_methods_supported or + introspection_encryption_enc_values_supported + Client Metadata parameters. + +
+
To facilitate interoperability with implementations not supporting @@ -836,7 +872,10 @@ + + + @@ -1092,6 +1131,7 @@ + @@ -1142,9 +1182,21 @@
[[ To be removed from the approved Final Specification ]] + + -03 + + + Stated that the + token_endpoint_auth_methods_supported + metadata value is used to indicate the Client Authentication Methods + supported at any Authorization Server endpoint. + + + + -02 - + Added multi-valued metadata parameters based on single-valued metadata parameters in , , and .