Skip to content

Commit

Permalink
Add nonce endpoint issuer metadata (#27)
Browse files Browse the repository at this point in the history
* Add nonce endpoint issuer metadata

* Editorial update

Co-authored-by: Giuseppe De Marco <giuseppe.demarco@teamdigitale.governo.it>

* Editorial update

Co-authored-by: Giuseppe De Marco <giuseppe.demarco@teamdigitale.governo.it>

* Edit the Nonce Issuer Metadata

the example is compliant with the OAuth 2.0 Authorization Server Metadata

---------

Co-authored-by: Giuseppe De Marco <giuseppe.demarco@teamdigitale.governo.it>
  • Loading branch information
cmarco0 and peppelinux authored Jul 9, 2024
1 parent 9fea163 commit 79005c0
Showing 1 changed file with 19 additions and 0 deletions.
19 changes: 19 additions & 0 deletions draft-demarco-oauth-nonce-endpoint.md
Original file line number Diff line number Diff line change
Expand Up @@ -119,6 +119,25 @@ Below is an example of how an OAuth 2.0 Authorization Server Metadata might incl
}
~~~~

## Nonce Issuer Metadata

The Nonce Issuers that uses the Nonce endpoint MUST include in their entity metadata the following parameter:

- **nonce_endpoint**: REQUIRED. This MUST be an HTTPS URL specifying the endpoint where clients can request a Nonce.

Below a non-normative example of Nonce Issuer Metadata :

~~~~
{
"issuer": "https://walletprovider.example.com",
"authorization_endpoint": "https://walletprovider.example.com/authorize",
"response_types_supported": ["code", "token"]
"token_endpoint": "https://walletprovider.example.com/token",
"nonce_endpoint": "https://walletprovider.example.com/nonce",
...
}
~~~~

# Nonce Request

When a Client needs a Nonce, it sends an HTTP GET request to the Nonce Endpoint.
Expand Down

0 comments on commit 79005c0

Please sign in to comment.