You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
There is an opportunity to improve the Dynamic Client Registration documentation to outline map the JWT signature verifications against the associated endpoints.
SSA JWT signatures MUST be verified against the associated JWK published at the CDR Register GetJWKS endpoint.
To ease interpretation between the different JWKS endpoints, the following statement will be added to this section to cover Registration Request JWT signature verification
Registration request JWTs MUST be verified against the associated JWK published by the ADR. Data Holders must extract the jwks_uri from the SSA in the request and verify the request JWT signature accordingly
There is an opportunity to improve the Dynamic Client Registration documentation to outline map the JWT signature verifications against the associated endpoints.
jwks_uri
as specified in the SSA definitionThe text was updated successfully, but these errors were encountered: