What does encrypt mean? - Githubissues

peppelinux / draft-demarco-oauth-nonce-endpoint

IETF Draft - OAuth 2.0 Nonce endpoint

Other

2 stars 5 forks source link

What does encrypt mean? #10

Open OR13 opened 7 months ago

OR13 commented 7 months ago

The payload seems to be JSON only, but I might recommend to lock this down a bit further.

The nonce MUST be a JWT (JWE) or CWT (COSE Encrypt).

Implementations MUST support ECDH-ES+A256KW and MAY support any encryption algorithms that are not marked prohibited in:

When CWT is used the nonce MUST be base64url encoded.

peppelinux commented 7 months ago

LGTM @OR13