Hi Ludwig, > What I understood from the feed-back is that using a parameter called "aud" > in a request to the token endpoint would be interpreted as a restriction on > the audience of authorization servers that are addressed by this request.
I am not talking about a parameter called 'aud'. Take a look at the token exchange spec -- the parameter is called 'audience'. 'aud' is the name of the claim. Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you. _______________________________________________ Ace mailing list Ace@ietf.org https://www.ietf.org/mailman/listinfo/ace
