Skip to content

Add kid header requirement for private_key_jwt #714

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
melanconj wants to merge 2 commits into
base: development
Choose a base branch
from
Open

Add kid header requirement for private_key_jwt #714

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
68c6fc1
Add kid header requirement for private_key_jwt
melanconj Jan 28, 2026
59f6910
Move statement & more clearly refer to the OpenId terms & specs
melanconj Feb 16, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 7 additions & 0 deletions doc/Security.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -297,6 +297,10 @@
>http://www.ietf.org/rfc/rfc6750.txt</link>&gt;</para>
<para>RFC 7292 - PKCS #12: Personal Information Exchange Syntax v1.1</para>
<para>&lt;<link xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="https://datatracker.ietf.org/doc/html/rfc7292"/>&gt;</para>
<para>IETF RFC 7515 JSON Web Signature (JWS)</para>
<para>&lt;<link xmlns:xlink="http://www.w3.org/1999/xlink"
xlink:href="http://www.ietf.org/rfc/rfc7515.txt"
>http://www.ietf.org/rfc/rfc7515.txt</link>&gt;</para>
<para>IETF RFC 7517 JSON Web Key (JWK)</para>
<para>&lt;<link xmlns:xlink="http://www.w3.org/1999/xlink"
xlink:href="http://www.ietf.org/rfc/rfc7517.txt"
Expand Down Expand Up @@ -4596,6 +4600,9 @@
<title>SetAuthorizationServerConfiguration</title>
<para>This operation modifies an existing authorization server configuration. The device
shall support this command if MaxConfigurations capability is greater than zero.</para>
<para>When the <literal>KeyID</literal> value of the configuration is set, the device shall
include that value in the <literal>kid</literal> header field of the client assertion defined
in RFC 7515 Section 4.1.4.</para>
<variablelist role="op">
<varlistentry>
<term>request</term>
Expand Down