Clarification on the aud claim in JWT Request Object

italia / eudi-wallet-it-docs

Italian EUDI Wallet Technical Specifications

Creative Commons Zero v1.0 Universal

56 stars 20 forks source link

Clarification on the aud claim in JWT Request Object #316

Closed fmarino-ipzs closed 3 months ago

fmarino-ipzs commented 5 months ago

In the current version of this spec, the aud parameter is defined as the identifier of the PID/(Q)EAA Provider. It’s recommended to use the URL of the specific endpoint that consumes the JWT.

peppelinux commented 5 months ago

using the url of the endpoint makes it not fully compliant with openid4vci where the issuer unique identifier is enough.

see the thread below and join in there if possibile for you https://github.com/openid/OpenID4VCI/issues/265

peppelinux commented 3 months ago

In the meeting of 31 July 2024 we have decided to

align the current issuance documentation with the mandatory usage of the aud value set with the endpoint url