|
4 | 4 | <meta charset="utf-8"> |
5 | 5 | <meta content="Common,Latin" name="scripts"> |
6 | 6 | <meta content="initial-scale=1.0" name="viewport"> |
7 | | -<title>OpenID Provider Commands 1.0 - draft 01</title> |
| 7 | +<title>OpenID Provider Commands 1.0 - draft 02</title> |
8 | 8 | <meta content="Dick Hardt" name="author"> |
9 | 9 | <meta content="Karl McGuinness" name="author"> |
10 | 10 | <meta content=" |
|
1250 | 1250 | </dd> |
1251 | 1251 | </dl> |
1252 | 1252 | </div> |
1253 | | -<h1 id="title">OpenID Provider Commands 1.0 - draft 01</h1> |
| 1253 | +<h1 id="title">OpenID Provider Commands 1.0 - draft 02</h1> |
1254 | 1254 | <section id="section-abstract"> |
1255 | 1255 | <h2 id="abstract"><a href="#abstract" class="selfRef">Abstract</a></h2> |
1256 | 1256 | <p id="section-abstract-1">OpenID Connect defines a protocol for an end-user to use an OpenID Provider (OP) to log in to a Relying Party (RP) and assert Claims about the end-user using an ID Token. RPs will often use the identity Claims about the user to implicitly (or explicitly) establish an Account for the user at the RP<a href="#section-abstract-1" class="pilcrow">¶</a></p> |
@@ -3073,6 +3073,21 @@ <h2 id="name-document-history"> |
3073 | 3073 | <p id="appendix-C-5.9.1">minor edits and structural cleanup<a href="#appendix-C-5.9.1" class="pilcrow">¶</a></p> |
3074 | 3074 | </li> |
3075 | 3075 | </ul> |
| 3076 | +<p id="appendix-C-6">-02<a href="#appendix-C-6" class="pilcrow">¶</a></p> |
| 3077 | +<ul class="normal"> |
| 3078 | +<li class="normal" id="appendix-C-7.1"> |
| 3079 | + <p id="appendix-C-7.1.1">added <code>aud_sub</code> as claim in commands and property from RP in audit reponses<a href="#appendix-C-7.1.1" class="pilcrow">¶</a></p> |
| 3080 | +</li> |
| 3081 | + <li class="normal" id="appendix-C-7.2"> |
| 3082 | + <p id="appendix-C-7.2.1">Metadata Response: Added <code>aud_sub_required</code> response property (OPTIONAL) normatively indicating RP requirement to receive <code>aud_sub</code> in subsequent Account Commands.<a href="#appendix-C-7.2.1" class="pilcrow">¶</a></p> |
| 3083 | +</li> |
| 3084 | + <li class="normal" id="appendix-C-7.3"> |
| 3085 | + <p id="appendix-C-7.3.1">collected all normative claims and properties into new "Claims and Properties" section centralizing definitions of all Command Token claims and response properties<a href="#appendix-C-7.3.1" class="pilcrow">¶</a></p> |
| 3086 | +</li> |
| 3087 | + <li class="normal" id="appendix-C-7.4"> |
| 3088 | + <p id="appendix-C-7.4.1">Command Token: Introduced normative baseline claim sets for Account vs Tenant Commands; clarified that only listed claims plus command-specific additions may appear (tightening allowed claims surface).<a href="#appendix-C-7.4.1" class="pilcrow">¶</a></p> |
| 3089 | +</li> |
| 3090 | + </ul> |
3076 | 3091 | </section> |
3077 | 3092 | </div> |
3078 | 3093 | <div id="authors-addresses"> |
|
0 commit comments