Signed and encrypted request - SSO
- John Jellema
Owned by John Jellema
2023-05-05
Loading data...
Client registration parameters "request_object_signing_alg", "request_object_encryption_alg" and "request_object_encryption_enc" control if provider if client must send signed and encrypted authorization request and what algorithms client is expected to use.
JWT Secured Authorization Request (JAR)
Registration parameters
| Name | Description |
|---|---|
| request_object_signing_alg | |
| request_object_encryption_alg | |
| request_object_encryption_enc |
Parameters
| Name | Description |
|---|---|
| request | Request object passed by value |
JWT Claims
The JWT contains as claims all authorization request parameters, including response_type, client_id, redirect_uri etc. In addition the following JWT parameters are required
| Name | Description |
|---|---|
| iss | Issuer Matches client_id of client |
| aud | Audience Matches issuer identifier |