[OAUTH-WG] How to deal with multi-valued request parameters in a JAR (draft-ietf-oauth-jwsreq-17)?

[Vladimir Dzhuvinov]

https://tools.ietf.org/html/draft-ietf-oauth-jwsreq-17#section-4

How should multi-valued request params be expressed in the JWT claims
set? As values in a JSON array?

     {
      "iss": "s6BhdRkqt3",
      "aud": "https://server.example.com";,
      "response_type": "code id_token",
      "client_id": "s6BhdRkqt3",
      "redirect_uri": "https://client.example.org/cb";,
      "scope": "openid",
      "state": "af0ifjsldkj",
      "some-query-param": [ "val-1", "val-2" ]
     }

Apart from custom params, the resource indicators spec also suggests
that such situations can occur:

https://tools.ietf.org/html/draft-ietf-oauth-resource-indicators-02#section-2

Thanks,

Vladimir

smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth