Re: [OAUTH-WG] About JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens

2021-04-06 Thread Thibault Normand
auth > Subject: [OAUTH-WG] About JSON Web Token (JWT) Profile for OAuth 2.0 Access > Tokens > > Hi, > By reading this draft > (https://tools.ietf.org/html/draft-ietf-oauth-access-token-jwt-05) I got > the > impression that it implies using JWTs as bearer tokens

Re: [OAUTH-WG] About JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens

2021-04-02 Thread vittorio . bertocci=40auth0 . com
Subject: [OAUTH-WG] About JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens Hi, By reading this draft (https://tools.ietf.org/html/draft-ietf-oauth-access-token-jwt-05) I got the impression that it implies using JWTs as bearer tokens, e.g., it does consider any of the semantics defined

[OAUTH-WG] About JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens

2021-04-01 Thread Nikos Fotiou
Hi, By reading this draft (https://tools.ietf.org/html/draft-ietf-oauth-access-token-jwt-05) I got the impression that it implies using JWTs as bearer tokens, e.g., it does consider any of the semantics defined in RFC7800. Is this correct? If yes what was the rational behind this design