Torsten Lodderstedt

Add support for OAuth 2.0 Mutual-TLS Client Authentication and Certificate-Bound Access Tokens

16

**Expected Behavior** Support for RFC 8705 would allows clients to authenticate using TLS certificates and to bind access tokens to such certificates. **Current Behavior** Addition of client authentication with public...

constraints

8

Hi, we come across some issues with the way the constraints element. In my opinion, it mixes expressions for filtering Credentials with a definition of the claims a verifier wants...

erroneous in presentation_definition JSON Schema

12

Hi, references ```json "filter": { "$ref": "http://json-schema.org/schema#" } ``` in lines 190, 203 and 222 of test/presentation-definition/schema.json cannot be resolved by a JSON schema parser. What is the meaning? I'm...

A bit about OAuth adoption in scenarios beyond its original scope (e.g. Open Banking).

1.2. Protocol Flow - figure 1 is misleading

2

In a discussion with OAuth implementers the following issue was raised: The first messages of the flow show that the client obtains the grant from the resource owner and passes...

What is the meaning of the first list (e.g. SD-JWT VC)? I guess it is a list of the places where ES256 must be used. I suggest to spell that...