Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature/sub clarifications #274

Conversation

rodrigoMacknight
Copy link
Contributor

gt-specs| gt-sec

  • this is result of an effort made by the specs working group with the sec working group to reduce interpretations and increase interoperability between institutions.

@@ -239,7 +239,10 @@ then it shall encrypt the ID Token;
4. For the encryption of the id_token, a key available in the `JWKS` informed in the `jwks_uri` parameter during the client registration must be used, indicated through the `kid` header of the JWT document;
5. The use of other headers to indicate the key used, such as `x5u`, `x5c`, `jku` or `jkw` is prohibited as defined in clause 2 [OIDC].


#### "sub" Claim clarifications
This profile uses the oficial openId definition found at: https://github.com/OpenBanking-Brasil/specs-seguranca/tree/main/idtoken_review.
Copy link

@guilhermedecampo guilhermedecampo Aug 18, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
This profile uses the oficial openId definition found at: https://github.com/OpenBanking-Brasil/specs-seguranca/tree/main/idtoken_review.
This profile uses the official OpenID definition found at: https://github.com/OpenBanking-Brasil/specs-seguranca/tree/main/idtoken_review.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thx

@pedro-octavio-andrade
Copy link
Contributor

pedro-octavio-andrade commented Aug 24, 2022

@rodrigoMacknight conseguiu realizar as alterações combinadas no GT Segurança?
São as alterações nas documentação md e html em português do mesmo documento que você alterou, além de uma alteração na doc de id_token (https://github.com/OpenBanking-Brasil/specs-seguranca/tree/main/idtoken_review)
Se precisar de algo, pode me contatar por favor.

@rodrigoMacknight
Copy link
Contributor Author

rodrigoMacknight commented Oct 11, 2022 via email

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants