search

solid / authentication-panel

GitHub repository for the Solid Authentication Panel
MIT License
11 stars 15 forks source link

Clarify access token audience #104

Closed matthieubosquet closed 3 years ago

matthieubosquet commented 3 years ago

The audience claim in Solid OIDC Access Tokens is not here because the DPoP makes it redundant.

It is present and required to identify the Solid API as the target of Solid OIDC Access Tokens.

matthieubosquet commented 3 years ago

@TallTed, would you agree that this PR in its current form may be merged?

If it is the case, would it be ok to merge it now or do we need further process?

TallTed commented 3 years ago

So far as I'm concerned, it's fine to merge. I may not be authoritative here, however.