Skip to content

Commit d66a237

Browse files
committed
Use scopes_supported key in transmitter metadata to align with RFC8414
Use `scopes_supported` key in transmitter metadata to align with RFC8414 Resolves issue #95
1 parent 55878e6 commit d66a237

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

openid-sharedsignals-framework-1_0.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -538,13 +538,13 @@ critical_subject_members
538538
> OPTIONAL. An array of member names in a Complex Subject which, if present in
539539
a Subject Member in an event, MUST be interpreted by a Receiver.
540540

541-
supported_scopes
541+
scopes_supported
542542

543-
> OPTIONAL. A list of OAuth {{RFC6749}} scope names that the Transmitter supports for specific endpoints. The value of this field is a JSON object that has the endpoint names as keys, and arrays of scope name strings they support as their values. OAuth tokens obtained using any of the scopes defined here MUST be accepted by the specified endpoint. Any key that is not defined as an endpoint in the Transmitter Configuration Metadata MUST be ignored. If the supported_scopes member is present in the metadata and an endpoint is not listed as a key, then that endpoint MUST not require OAuth for authorization.
543+
> OPTIONAL. A list of OAuth {{RFC6749}} scope names that the Transmitter supports for specific endpoints. The value of this field is a JSON object that has the endpoint names as keys, and arrays of scope name strings they support as their values. OAuth tokens obtained using any of the scopes defined here MUST be accepted by the specified endpoint. Any key that is not defined as an endpoint in the Transmitter Configuration Metadata MUST be ignored. If the scopes_supported member is present in the metadata and an endpoint is not listed as a key, then that endpoint MUST not require OAuth for authorization.
544544

545545
authorization_servers
546546

547-
> OPTIONAL. An array of supported authorization servers and the scopes they support. Each element of the array is a Authorization Server Descriptor JSON object defined in the section {{authz-server-descriptor}} below. If the `supported_scopes` member is present in the metadata, then the `authorization_servers` MUST also be present, and it MUST provide a server location for every supported scope.
547+
> OPTIONAL. An array of supported authorization servers and the scopes they support. Each element of the array is a Authorization Server Descriptor JSON object defined in the section {{authz-server-descriptor}} below. If the `scopes_supported` member is present in the metadata, then the `authorization_servers` MUST also be present, and it MUST provide a server location for every supported scope.
548548

549549
TODO: consider adding a IANA Registry for metadata, similar to Section 7.1.1 of
550550
{{RFC8414}}. This would allow other specs to add to the metadata.
@@ -671,7 +671,7 @@ Content-Type: application/json
671671
"verification_endpoint":
672672
"https://tr.example.com/ssf/mgmt/verification",
673673
"critical_subject_members": [ "tenant", "user" ],
674-
"supported_scopes":
674+
"scopes_supported":
675675
{
676676
"status_endpoint": ["status_scope"],
677677
"configuration_endpoint": ["admin_scope", "status_scope"]

0 commit comments

Comments
 (0)