diff --git a/lws10-core/Authorization.html b/lws10-core/Authorization.html index 287ed7b..124b445 100644 --- a/lws10-core/Authorization.html +++ b/lws10-core/Authorization.html @@ -87,11 +87,26 @@
- An authorization server SHOULD advertise the subject tokens that it supports by including a subject_token_types_supported
- entry in the server metadata document. This entry is a JSON array containing a list of valid subject_token_type values
- that can be supplied at the authorization server's token endpoint.
+ In addition to the metadata defined in [[!RFC8414]], an LWS authorization server metadata document
+ defines the following parameters:
subject_token_types_supported
+ OPTIONAL. JSON array containing a list of valid subject_token_type values
+ that can be supplied at the authorization server's token endpoint. An authorization server
+ SHOULD advertise the subject tokens that it supports by including this entry in the server metadata document.
+ subject_uri_schemes_supported
+ OPTIONAL. JSON array containing a list of URI scheme values for subject identifiers that the
+ authorization server supports. An authorization server SHOULD advertise the subject URI schemes
+ that it supports by including this entry in the server metadata document.
+ If omitted, the default value is ["https"].
+ An example authorization server metadata resource is included below.
@@ -112,7 +127,11 @@