diff --git a/lws10-core/Authorization.html b/lws10-core/Authorization.html index 287ed7b..124b445 100644 --- a/lws10-core/Authorization.html +++ b/lws10-core/Authorization.html @@ -87,11 +87,26 @@

Authorization Server Metadata

- An authorization server SHOULD advertise the subject tokens that it supports by including a subject_token_types_supported - entry in the server metadata document. This entry is a JSON array containing a list of valid subject_token_type values - that can be supplied at the authorization server's token endpoint. + In addition to the metadata defined in [[!RFC8414]], an LWS authorization server metadata document + defines the following parameters:

+ +

An example authorization server metadata resource is included below.

@@ -112,7 +127,11 @@

Authorization Server Metadata

"token"], "subject_token_types_supported": [ "urn:ietf:params:oauth:token-type:jwt", - "urn:ietf:params:oauth:token-type:id-token"] + "urn:ietf:params:oauth:token-type:id-token"], + "subject_uri_schemes_supported": [ + "did:web", + "did:key", + "https"] } diff --git a/lws10-core/IANA-Considerations.html b/lws10-core/IANA-Considerations.html index 5505bc9..ab6a5d7 100644 --- a/lws10-core/IANA-Considerations.html +++ b/lws10-core/IANA-Considerations.html @@ -42,6 +42,21 @@

OAuth Authorization Server Metadata Registry

Specification Document(s): Section 5 of LWS-Auth + +