You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Basically, it consists in making clients pass authentication request details in a JWT instead of a query string. The JWT is the passed as a request parameter, or hosted on a client endpoint which url is passed as a request_uri parameter.
It would be nice for Authlib to implement this spec.
The text was updated successfully, but these errors were encountered:
The OIDC JWTRequest concept has been generalized in its own dedicated spec RFC 9101 The OAuth 2.0 Authorization Framework: JWT-Secured Authorization Request (JAR).
Basically, it consists in making clients pass authentication request details in a JWT instead of a query string. The JWT is the passed as a
request
parameter, or hosted on a client endpoint which url is passed as arequest_uri
parameter.It would be nice for Authlib to implement this spec.
The text was updated successfully, but these errors were encountered: