Merge pull request #3 from surfnet-niels/main

Proposal for "information_uri"

Author: selfissued

openid-federation-subordinate-events-1_0.md

@@ -132,6 +132,7 @@ The claims in the Subordinate events statement response are:
 - **iat**: (REQUIRED) Time when the event is related to, using the time format defined for the `iat` claim.
 - **event**: (REQUIRED) String that identifies the event, such as `registration`, `jwks_update`, `metadata_policy_update`, `metadata_update`, or `revocation`.
 - **event_description**: (OPTIONAL) String that may offer additional information about the event.
+- **information_uri**: (OPTIONAL) URL for documentation of additional information about this event viewable by the End-User. Use of HTTPs URLs is RECOMMENDED.
 
 #### Example Response
 
@@ -143,7 +144,8 @@ The claims in the Subordinate events statement response are:
   "federation_registration_events": [
     {
       "iat": 1590000000,
-      "event": "registration"
+      "event": "registration",
+      "information_uri" : "https://immediate-superior.example.org/policy/Metadata_Registration_Practice_Statement"
     },
     {
       "iat": 1590000000,
@@ -152,7 +154,8 @@ The claims in the Subordinate events statement response are:
     {
       "iat": 1600000000,
       "event": "revocation",
-      "event_description": "compromised node"
+      "event_description": "compromised node",
+      "information_uri" : "https://www.cve.org/CVERecord?id=CVE-2018-1000611"
     },
     {
       "iat": 1610000000,