Re: [OAUTH-WG] PAR - Can AS/client require request object?

gt;> >> Works for me. >> >> >> >> From: OAuth On Behalf Of Torsten Lodderstedt >> Sent: Friday, May 1, 2020 2:51 AM >> To: Brian Campbell >> Cc: oauth >> Subject: Re: [OAUTH-WG] PAR - Can AS/client require request object? >> >&g

Re: [OAUTH-WG] PAR - Can AS/client require request object?

Torsten. >> >> > On 1. May 2020, at 17:56, Mike Jones > 40microsoft@dmarc.ietf.org> wrote: >> > >> > Works for me. >> > >> > >> > >> > From: OAuth On Behalf Of Torsten Lodderstedt >> > Sent: Friday, May 1, 2020 2:51 AM &

Re: [OAUTH-WG] PAR - Can AS/client require request object?

best regards, > Torsten. > > > On 1. May 2020, at 17:56, Mike Jones 40microsoft@dmarc.ietf.org> wrote: > > > > Works for me. > > > > > > > > From: OAuth On Behalf Of Torsten Lodderstedt > > Sent: Friday, May 1, 2020 2:51 AM > > To:

Re: [OAUTH-WG] PAR - Can AS/client require request object?

ike Jones > wrote: > > Works for me. > > > > From: OAuth On Behalf Of Torsten Lodderstedt > Sent: Friday, May 1, 2020 2:51 AM > To: Brian Campbell > Cc: oauth > Subject: Re: [OAUTH-WG] PAR - Can AS/client require request object? >

Re: [OAUTH-WG] PAR - Can AS/client require request object?

Works for me. From: OAuth On Behalf Of Torsten Lodderstedt Sent: Friday, May 1, 2020 2:51 AM To: Brian Campbell Cc: oauth Subject: Re: [OAUTH-WG] PAR - Can AS/client require request object? Filip´s proposal works for me. Are there any objections? Brian Campbell mailto:40pingidentity

Re: [OAUTH-WG] PAR - Can AS/client require request object?

Works for me also ___ OAuth mailing list OAuth@ietf.org https://www.ietf.org/mailman/listinfo/oauth

Re: [OAUTH-WG] PAR - Can AS/client require request object?

Filip´s proposal works for me. Are there any objections? Brian Campbell schrieb am Mo. 27. Apr. 2020 um 20:57: > While there are certainly different permutations and contexts of use that > could be imagine, I tend to agree with Filip here in not seeing a strong > need to define new PAR

Re: [OAUTH-WG] PAR - Can AS/client require request object?

While there are certainly different permutations and contexts of use that could be imagine, I tend to agree with Filip here in not seeing a strong need to define new PAR specific metadata around signing/encryption of the request object. On Mon, Apr 27, 2020 at 2:35 AM Filip Skokan wrote: >

Re: [OAUTH-WG] PAR - Can AS/client require request object?

Considering there's going to be a setting that forces clients to use PAR (other mailinglist thread), then we should rely on the existing `request_object_signing_alg` presence to indicate a Request Object must be used (as suggested by this upcoming OIDC Core errata

[OAUTH-WG] PAR - Can AS/client require request object?

Hi all, this is one of the topics we quickly flipped through in the virtual meeting last week. I see the following open questions: - Can the client require its instances to use request objects only. - Are there further requirements on the properties of these objects? Signed only, Signed and