Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

An example of Trust Mark delegation. #62

Merged
merged 2 commits into from
Sep 11, 2024
Merged

An example of Trust Mark delegation. #62

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
98ca25b
An example of Trust Mark delegation.
rohe Sep 1, 2024
f6c93c4
Per Mike's change requests.
rohe Sep 11, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
72 changes: 71 additions & 1 deletion openid-federation-1_0.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3665,8 +3665,78 @@
]]></artwork>
</figure>
</section>
</section>
<section title="Trust Mark Delegation Example" anchor="trust_delegation_example">
<figure>
<preamble>
A non-normative example of a <spanx style="verb">trust_marks</spanx>
claim in the JWT Claims Set for an Entity Configuration in which the
Trust Mark is issued by an Entity that issues Trust Marks on behalf of
another Entity.
The fact that a Trust Mark is issued by a Trust Mark issuer that is not
the owner of the Trust Mark is expressed by including a
<spanx style="verb">delegation</spanx> claim
in the Trust Mark, whose value is a signed JWT.
</preamble>
<name>
Example of a Trust Mark using delegation. Only the JWT Claims Set of the
Trust Mark is shown.
</name>
<artwork><![CDATA[
{
"delegation":
"eyJhbGciOiJSUzI1NiIsImtpZCI6IlpHdEtNVzVKVEZVeFVWOWZWSG90VTNNd1pIa
FlXbU5qY2pselIydFpTaTFMYzBKQ1IzcGtVRzlyYXcifQ.eyJzdWIiOiAiaHR0cHM
6Ly90bWkuZXhhbXBsZS5vcmciLCAiaWQiOiAiaHR0cHM6Ly9yZWZlZHMub3JnL3Np
cnRmaSIsICJpc3MiOiAiaHR0cHM6Ly90bV9vd25lci5leGFtcGxlLm9yZyIsICJpY
XQiOiAxNzI1MTc2MzAyfQ.MTPri3aSN4vxUL_yzZ16He2UsNAWE6u9u59oRl-u8kq
JFY95UZZxsZrCeSjLDJAclQmDfe2xHdV-UGI-zOu3wkeCW-AuIH6f8J-e_4pSHLzT
caZd8PvCbab2bZuQes5FYQ6xhpAQWPkry0TtHic5iN-0CZ5a1s1r3YCbj72_kicMz
F7WlLkMVgXDIA5TwQNuAwWavhh2c1faVYEV56uG-n_-bekIb3br6uuPtlMpRVUkoi
eKpwDcGxyJct-g0H436gvIm7lyKfvi0SmKxKK0AbL48-yRi1LSOXLx_60alAGHzQ-
XlnuREVu8VWgIPHelsyPHJPc6hQDuchyu52Nupg",
"iat": 1725176302,
"id": "https://refeds.org/sirtfi",
"sub": "https://entity.example.org",
"exp": 1727768302,
"iss": "https://tmi.example.org"
}
]]></artwork>
</figure>
<figure>
<preamble>
JWT Claims Set of the Trust Mark delegation JWT in the "delegation" claim above
</preamble>
<name>
Trust Mark delegation JWT Claim Set
</name>
<artwork><![CDATA[
{
"sub": "https://tmi.example.org",
"id": "https://refeds.org/sirtfi",
"iss": "https://tm_owner.example.org",
"iat": 1725176302
}
]]></artwork>

</figure>
<figure>
<preamble>
JWS Header Parameters for the Trust Mark delegation JWT in
the "delegation" claim above
</preamble>
<name>
Trust Mark delegation JWT JWS Header Parameters
</name>
<artwork><![CDATA[
{
"typ": "trust-mark-delegation+jwt",
"alg": "RS256",
"kid": "TjNZeEdqdDRPSXpoUlhLOUZjcXNJb2xjci02VGxCMWRkVUUxMGhjNjd0MA"
}
]]></artwork>
</figure>
</section>
</section>
<section title="Federation Endpoints" anchor="federation_endpoints">
<t>
The federation endpoints of an Entity can be found in the
Expand Down
Loading