Thanx everybody for providing so much information, I really appreciate it!
FWIW, the self-contained "RESTless" request scheme I mentioned would in a HTTP
context look like this:
POST /transact HTTP/1.1 // Always POST and to a
single URL/partner
User-Agent: Java
Host: payments.mybank.com
Content-Type: application/json
Content-Length: 1234
{
"@context":"some-name-space",
"@qualifier":"some-object-type", // "Operation"
.
other message properties
.
"signature":{} // Covers the entire
JSON object
}
Including the target URL in the message seems like a reasonable addition which
I have yet to perform.
Anders
_______________________________________________
jose mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/jose
