Open haudiobe opened 7 years ago
Submitter: GIri Mandyam The document says that “The Access Token shall be base64 encoded according to Base-64 Data Encoding.” However, RFC 7519 already requires JWT fields to be base64url encoded. Does the JWT need to be re-encoded in its entirety?
Addressed in Security TF call 16-11-09
As mentioned in minutes, see accepted resolution for this issue.
Submitter: GIri Mandyam The document says that “The Access Token shall be base64 encoded according to Base-64 Data Encoding.” However, RFC 7519 already requires JWT fields to be base64url encoded. Does the JWT need to be re-encoded in its entirety?