Authorization Response Algs should be conditional in RegistrationProperties #620
Labels
Non-breaking change
A change that is not expected to result in a new endpoint version.
Schema
Issues related to schema.
Security
Change or question related to the information security profile
Milestone
Description
The properties
authorization_signed_response_alg
andauthorization_encrypted_response_alg
are designated asoptional
properties in the client registration response schemaRegistrationProperties
section of the DCR API definitions. According to their descriptions they areconditional
.authorization_signed_response_alg
The JWS alg algorithm required for signing authorization responses. If this is specified, the response will be signed using JWS and the configured algorithm. The algorithm “none” is not allowed. Required if response_type of “code” is registered by the client.
authorization_encrypted_response_alg
The JWE alg algorithm required for encrypting authorization responses. If unspecified, the default is that no encryption is performed. Required if “authorization_encrypted_response_enc” is included.
Area Affected
DCR APIs > Schema > RegistrationProperties
Change Proposed
Make
authorization_signed_response_alg
andauthorization_encrypted_response_alg
conditional.The text was updated successfully, but these errors were encountered: