11---
2- title : OpenID Shared Signals Framework Specification 1.0 - draft 05
2+ title : OpenID Shared Signals Framework Specification 1.0
33abbrev : SharedSignals
44docname : openid-sharedsignals-framework-1_0
5- date : 2025-07-30
5+ date : 2025-08-29
66
77ipr : none
88cat : std
@@ -122,7 +122,7 @@ normative:
122122 -
123123 ins : A. Tulshibagwale
124124 name : Atul Tulshibagwale
125- date : June 2024
125+ date : August 2025
126126 target : https://openid.net/specs/openid-caep-1_0.html
127127 title : OpenID Continuous Access Evaluation Profile 1.0
128128 RISC :
@@ -145,7 +145,7 @@ normative:
145145 -
146146 ins : A. Tulshibagwale
147147 name : Atul Tulshibagwale
148- date : April 2022
148+ date : August 2025
149149 target : https://openid.net/specs/openid-risc-profile-specification-1_0.html
150150 title : OpenID RISC Profile Specification 1.0
151151 NAMINGCONVENTION :
@@ -2555,105 +2555,3 @@ to assert certain patent claims against other contributors and against implement
25552555OpenID invites any interested party to bring to its attention any copyrights, patents,
25562556patent applications, or other proprietary rights that may cover technology that may be
25572557required to practice this specification.
2558-
2559- # Document History
2560-
2561- [[ To be removed from the final specification ]]
2562-
2563- -23
2564-
2565- * Cleaned up markdown (#91)
2566- * Added language to allow implementations to define their own processing
2567- behavior for SETS (#255)
2568-
2569- -20
2570-
2571- * Clarified that Transmitters may drop events if they aren't able to deliver
2572- them to the receiver.
2573- * Added examples to demonstrate how "wildcard matching" works in SSF event
2574- complex subjects
2575- * Added an `inactivity_timeout` field to the Transmitter metadata, after which
2576- transmitters may pause, disable or delete inactive streams.
2577- * Clarified that Receivers should validate the `aud` value
2578- * Clarified that Transmitters may include additional fields in SSF events, and
2579- how receivers should interpret them.
2580- * Specified that the poll delivery endpoint should require authorization
2581- * Clarified stream creation behavior for delivery method mismatch and poll
2582- delivery
2583- * Clarified that StreamIDs have to be of the "unreserved characters" character
2584- set from RFC3986
2585- * Clarified the authorization_header requirement for the receiver
2586- * Rearranged the content for easier readability: Eliminated the "Profiles"
2587- section (previous section 10). Created new sections "Events" (new section 4),
2588- and "Event Delivery" (new Section 6). Incorporated text from the erstwhile
2589- " Profiles" section into other sections as appropriate. Fixed references and
2590- titles of examples.
2591- * Added "IP Address" as a subject identifier format
2592- * In Create Stream, specified that description may be included in the response,
2593- and that the `endpoint_url` is specified by the Transmitter in the `poll`
2594- delivery method
2595- * Updated URLs of linked specs and other resources
2596- * Fixed example to have correct format for "reason_admin" and "reason_user"
2597-
2598- -03
2599-
2600- * Removing transmitter supplied fields from stream config PUT and PATCH examples
2601- * Add OPTIONAL/REQUIRED to the fields in the stream configuration
2602- * Add stream_id to the response when getting stream status
2603- * Update subject/sub_id in examples. Fix CAEP example
2604- * Clarify language around sending Stream Updated events
2605- * Add sentence suggesting that Issuer information should be validated by the
2606- Receiver
2607- * Removed cause-time from RISC example
2608- * Fix description of error code for invalid state
2609- * Add SHOULD language about checking the issuer value
2610- * Added language requiring authorization of stream management API
2611- * Added description of `txn` claim
2612- * Added a `default_subjects` field to Transmitter Configuration Metadata
2613- indicating expected subject behavior for new streams
2614- * added txn claims to non-normative SET examples and generic txn callout under
2615- SET Profile section RFC8417
2616- * Editorial: Standardize terms and casing, fix some typos
2617-
2618- -02
2619-
2620- * added spec version to metadata
2621- * Added description as receiver supplied
2622- * added language to make verification and updated events independent of
2623- events_supported
2624- * added top-level sub_id claim. Modified existing language to reflect the use of
2625- the sub_id claim
2626- * updated text to reflect sub_id as a top-level field in verification and stream
2627- updated events
2628- * \#46 add stream exists behavior
2629- * update stream exists to 409
2630- * Add 'format' to normative examples in CAEP
2631- * Remove 'format' from stream config
2632- * Remove subject from stream status (#88)
2633- * Add reason to GET /status response
2634- * Make reason look like an enum in the example to indicate how we expect it to
2635- be used
2636- * Fixes \#60 - are subjects required
2637- * Added format field to complex subjects and updated examples (#71)
2638- * Switch stray '204 OK' to read '204 No Content' (#73)
2639- * Change 'jwt-id' to 'jwt_id' to match style of other subject formats (#63)
2640- * resolving issue \#45 added explanatory text to Stream Configuration (#68)
2641- * \#28 update delivery method references to URNs (#49)
2642- * Changed jwks_uri from REQUIRED to OPTIONAL (#47)
2643- * Sse to ssf (#43)
2644- * updated SSE to Shared Signals in all files
2645- * changed source format to md
2646- * renamed files to be called sharedsignals instead of SSE. No change to the
2647- content (#41)
2648- * Add stream_id to SSE Framework spec as per Issue 4:
2649- https://github.com/openid/sse/issues/4
2650- * Update README with development instructions and fix error in Makefile
2651- * Added note to PUSH/POLL section about uniqueness requirements for the URLs
2652- * Add explanation about what an Event Stream is
2653- * Change terms to Transmitter-Supplied and Receiver-Supplied
2654- * Pragma is an obsolete HTTP header
2655- * It's unnecessary to specify the character as UTF-8 in all examples (#10)
2656- * Fix issue \#18 by converting saml-assertion-id to saml_assertion_id to
2657- maintain consistent formatting with other subject identifiers (#1)
2658- * updated backward compatibility language
2659- * added section for Transmitter Configuration Metadata RISC compatibility
0 commit comments