Skip to content

Conversation

@selfissued
Copy link
Member

Fixes #130

@peppelinux
Copy link
Member

I request to move the trust chain in the response as REQUIRED for consistency

It makes sense to have It by default

@selfissued
Copy link
Member Author

I agree that it's more consistent to always include the trust_chain claim in the resolve response JWT.

@zachmann
Copy link
Collaborator

zachmann commented Dec 2, 2024

I want to open a discussion on whether the resolver "MAY return a successful resolve response using any one of the Trust Anchor values provided" (current text of the PR) or it SHOULD return the resolve response for the first Trust Anchor that resolves successfully.

I would argue for the later, since this gives guidance, but would still allow the resolver to do otherwise.

@peppelinux
Copy link
Member

peppelinux commented Dec 2, 2024

"First" might depend from the ordering of the trust anchors provided within the array, "Any" might mean that it is only up to the trust evaluator decide which trust anchor to use.

Any gives more freedom to the resolver in taking its choice, while "First" sounds like it would be the requestor in deciding the ordering of the trust anchor on the basis of the priority it decides

@selfissued selfissued merged commit 1bb5492 into openid:main Dec 18, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Resolver with multiple trust anchors

5 participants