Not supporting [RFC 9068] Must add issuer claim to the access token JWT!

thephpleague / oauth2-server

A spec compliant, secure by default PHP OAuth 2.0 Server

https://oauth2.thephpleague.com

MIT License

6.52k stars 1.12k forks source link

Not supporting [RFC 9068] Must add issuer claim to the access token JWT! #1434

Open StefanoMantero opened 1 month ago

StefanoMantero commented 1 month ago

As already mentioned by @Sephster, now the issuer is mandatory!

@Sephster wouldn't RFC 9068 be the relevant spec here? (Now, anyway... I think it did not exist yet when this conversation started.) That does make iss required.

Originally posted by @tgr in https://github.com/thephpleague/oauth2-server/issues/1137#issuecomment-1474717945