Re: [OAUTH-WG] audience (was draft-ietf-oauth-jwt-bearer-06)

2013-11-05 Thread Chuck Mortimore
On Mon, Nov 4, 2013 at 10:45 AM, Brian Campbell bcampb...@pingidentity.comwrote: On Fri, Nov 1, 2013 at 1:52 PM, Hannes Tschofenig hannes.tschofe...@gmx.net wrote: You write: 3. The JWT MUST contain an aud (audience) claim containing a value that identifies the

[OAUTH-WG] audience (was draft-ietf-oauth-jwt-bearer-06)

2013-11-04 Thread Brian Campbell
On Fri, Nov 1, 2013 at 1:52 PM, Hannes Tschofenig hannes.tschofe...@gmx.net wrote: You write: 3. The JWT MUST contain an aud (audience) claim containing a value that identifies the authorization server as an intended audience. The token endpoint URL of the authorization