Skip to content

Improved "constraints" claim description per feedback from Nat #321

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
selfissued merged 3 commits into from
Dec 31, 2025
Merged

Improved "constraints" claim description per feedback from Nat #321

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
62010e5
Improved "constraints" claim description per feedback from Nat
selfissued Dec 25, 2025
7148b3f
Merge branch 'main' into mbj-nat-constraints
selfissued Dec 28, 2025
a97b85f
Contrast "delegation" claim with existing "act" claim
selfissued Dec 30, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 14 additions & 3 deletions openid-federation-1_0.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7632,9 +7632,8 @@ HTTP/1.1 302 Found
Use of this Claim is OPTIONAL.
</t>
<t>
For instance, the <spanx style="verb">constraints</spanx> Claim
might be used to impose material thickness limits for a physical object.
This Claim is used in this specification as specified in <xref target="ss-specific"/>
For instance,
this Claim is used in this specification as specified in <xref target="ss-specific"/>
to represent constraints on the Trust Chain for the Entity.
</t>
</section>
Expand Down Expand Up @@ -7720,6 +7719,18 @@ HTTP/1.1 302 Found
to represent delegation of the right to issue Trust Marks
with a particular identifier.
</t>
<t>
Note that the <spanx style="verb">delegation</spanx> Claim is both
syntactically and semantically distinct from the existing
<spanx style="verb">act</spanx> Claim <xref target="IANA.JWT.Claims"/>.
<spanx style="verb">act</spanx> is a JSON object whereas
<spanx style="verb">delegation</spanx> is a StringOrURI.
Semantically, the Delegation JWT defined in <xref target="delegation_jwt"/>
carries a signature by an issuer cryptographically proving
the right to delegate to the party.
The <spanx style="verb">act</spanx> Claim, carrying no signature,
cannot achieve this.
</t>
</section>

<section anchor="logo_uriClaim" title='"logo_uri" (Logo URI) Claim'>
Expand Down