OK... So, following is the syntax right? I take it you base64 encode this
as well?

Access-Token = SHA256-Hash(TokenBindingID) + '&#%' + Random-UUID

On Tue, Nov 21, 2017 at 1:41 AM, Inthirakumaaran Tharmakulasingham <
[email protected]> wrote:

> Hi all,
>
> In my project token binding, I need to append the hash value of token
> binding Id to access token, refresh token and authorization code.For that,
> I need a magic String as a delimiter to separate token binding id and
> security tokens.
>
> Eg: if you take access token with token binding support then
>
> new access token = hash(tokenBindingID)+delimieter+normalAccessToken.
>
> Later on, this delimiter will be used in Introspection endpoint to extract
> the token binding hash value.The problem is user can configure his token
> generator in IS and that generator could use special characters.So I need a
> proper delimiter
>
> Currently, I am using "&#%" as the delimiter and made the delimiter
> configurable.Is this delimiter okay as default? Am I missing anything?
>
> Thanks,
>
> Regards,
> kumar
>
>
> --
> Inthirakumaaran
> Software Engineering - Intern | WSO2
>
> Email: [email protected]
> Mobile:0766598050 <076%20659%208050>
>
>


-- 

*Kasun Gajasinghe*Associate Technical Lead, WSO2 Inc.
email: kasung AT spamfree wso2.com
linked-in: http://lk.linkedin.com/in/gajasinghe
blog: http://kasunbg.org
phone: +1 650-745-4499 <+1%20650-745-4499>, 77 678 0813
_______________________________________________
Dev mailing list
[email protected]
http://wso2.org/cgi-bin/mailman/listinfo/dev

Reply via email to