Brian Campbell

I ran into real reservations as I looked at making this change. I still don't like pushing the trust chain validation to the origin. For many reasons. The proxy also...

Thanks Mike. That was much easier than using the "suggestions" option. I merged #2263 and then fixed(!?) the YAML header with [79c8b49](https://github.com/httpwg/http-extensions/pull/2256/commits/79c8b493831c83dc4aa78401fd415db1413b1161). I think this one is good to go...

Hi @iainmcgin, I'd like to ever so humbly suggest that [jose4j](https://bitbucket.org/b_c/jose4j) be considered for JWT decoding and validation in AppAuth . It's an open source JWT/JOSE library in Java that...