Skip to content

RFC9101 JWT-Secured Authorization Request (JAR) #723

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
azmeuk opened this issue Mar 19, 2025 · 0 comments · May be fixed by #749
Open

RFC9101 JWT-Secured Authorization Request (JAR) #723

azmeuk opened this issue Mar 19, 2025 · 0 comments · May be fixed by #749
Labels
spec Related to a RFC

Comments

@azmeuk
Copy link
Member

azmeuk commented Mar 19, 2025

The OIDC JWTRequest concept has been generalized in its own dedicated spec RFC 9101 The OAuth 2.0 Authorization Framework: JWT-Secured Authorization Request (JAR).

Basically, it consists in making clients pass authentication request details in a JWT instead of a query string. The JWT is the passed as a request parameter, or hosted on a client endpoint which url is passed as a request_uri parameter.

It would be nice for Authlib to implement this spec.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
spec Related to a RFC
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant