search

oauth-wg / oauth-transaction-tokens

MIT License
7 stars 10 forks source link

Possible confusion in IANA registry section #84

Closed tulshi closed 3 weeks ago

tulshi commented 3 months ago

Yaron's feedback email states that: "11.1: I think there is some confusion here. It is possibly useful to define this value (if we want to embed txn tokens within access tokens). But the "typ" header is a whole different thing, it needs to be a media type. See https://datatracker.ietf.org/doc/html/rfc8725#name-use-explicit-typing"

I'm not completely sure about this, so tracking this item

bc-pi commented 3 months ago

https://hackmd.io/@rpc-sec-wg/SyAb2pxI6 from a while back had "https://www.ietf.org/archive/id/draft-ietf-oauth-transaction-tokens-00.html#name-iana-considerations Registration requests are off or missing or …."