diff --git a/openid-federation-1_0.xml b/openid-federation-1_0.xml index 5eafafa..0153c4e 100644 --- a/openid-federation-1_0.xml +++ b/openid-federation-1_0.xml @@ -1407,21 +1407,6 @@ Registration as described in , then this claim is REQUIRED. - - - - OPTIONAL. - JSON array containing a list of the supported - JWS algorithms - (alg values) - for signing the JWT - used in the Request Object of the OpenID Connect authentication request - or in the private_key_jwt JWT - of a pushed authorization request to the OP. - No default algorithms are implied if this entry is omitted. - Servers SHOULD support RS256. - The value none MUST NOT be used. - @@ -1476,7 +1461,11 @@ "private_key_jwt" ], "pushed_authorization_request_endpoint":"https://op.umu.se/openid/par", - "request_authentication_signing_alg_values_supported": [ + "request_object_signing_alg_values_supported": [ + "ES256", + "RS256" + ], + "token_endpoint_auth_signing_alg_values_supported": [ "ES256", "RS256" ] @@ -7136,25 +7125,6 @@ HTTP/1.1 302 Found - - - - Metadata Name: request_authentication_signing_alg_values_supported - - - Metadata Description: - JSON array containing the JWS signing algorithms - supported for the signature on - the JWT used to authenticate the request - - - Change Controller: OpenID Foundation Artifact Binding Working Group - openid-specs-ab@lists.openid.net - - - Specification Document(s): of this specification - - - @@ -9742,8 +9712,10 @@ Host: op.umu.se Fixed #34: Deleted - request_authentication_methods_supported - and replaced with the use of standard PAR metadata values. + request_authentication_methods_supported and + request_authentication_signing_alg_values_supported + and replaced with the use of standard Request Object + and PAR metadata values. Also restricted PAR authentication methods to those performing signing with the RP's keys.