solid-oidc icon indicating copy to clipboard operation
solid-oidc copied to clipboard

UMA Claims Pushing with DPoP-bound Solid OIDC tokens

Open laurensdeb opened this issue 3 years ago • 0 comments

In the Solid OIDC specification we are currently not defining the UMA claims pushing flow in a normative sense. See Section 9.2

The claim_token_format http://openid.net/specs/openid-connect-core-1_0.html#IDToken is used, which should thus indicates a Solid-OIDC DPoP-bound identity token. However from the perspective of the UMA specification DPoP is not considered in the claims pushing flow, so it would be good to write this out in a normative fashion. Especially given the fact that this IRI already identifies OIDC ID Tokens that aren't DPoP-bound.

laurensdeb avatar Apr 26 '22 14:04 laurensdeb