Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Documentation improvement: JWT Signature verification requirements during the DCR flows #186

Open
CDR-Register-Stream opened this issue Sep 1, 2021 · 2 comments
Labels
documentation Improvements or additions to documentation

Comments

@CDR-Register-Stream
Copy link

There is an opportunity to improve the Dynamic Client Registration documentation to outline map the JWT signature verifications against the associated endpoints.

SSA Verification Against the CDR Register JWKS Endpoint
Registration Request JWT jwks_uri as specified in the SSA definition
@CDR-Register-Stream
Copy link
Author

The Registration Validation section currently covers SSA Verification with the following statement

SSA JWT signatures MUST be verified against the associated JWK published at the CDR Register GetJWKS endpoint.

To ease interpretation between the different JWKS endpoints, the following statement will be added to this section to cover Registration Request JWT signature verification

Registration request JWTs MUST be verified against the associated JWK published by the ADR. Data Holders must extract the jwks_uri from the SSA in the request and verify the request JWT signature accordingly

@CDR-API-Stream
Copy link

This issue will be addressed in the CDS standards maintenance process. Issue 442 has been raised to track this work through the process

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
documentation Improvements or additions to documentation
Projects
None yet
Development

No branches or pull requests

2 participants