Re: [Jwt-reg-review] Request to register claims: "scope" , "at_use_nbr"

Hello Miguel,

RFC 7519 says that values for the JSON Web Token Claims Registry
<https://tools.ietf.org/html/rfc7519#section-10.1> are registered on a
Specification Required basis. RFC 5226 says that Specification Required
<https://tools.ietf.org/html/rfc5226#section-4.1> means that the values and
their meanings must be documented in a permanent and readily available
public specification. I do not believe a Microsoft Word document as an
email attachment is sufficient in that regard. This registration review
request will need to be made again with a straightforward pointer to such a
permanent and readily available public specification that defines the
claim.

Also note that the 'scope' claim is being defined in Section 4.2 of OAuth
2.0 Token Exchange
<https://tools.ietf.org/html/draft-ietf-oauth-token-exchange-16#section-4.2>
with effectively the same meaning.  Registration has already been requested
from/by that document so isn't necessary from the ETSI GS NFV-SEC 022
perspective.

Thanks,
Brian Campbell
One of the (so called) Designated Experts for the JWT Claims Registry

On Mon, May 20, 2019 at 11:35 AM Miguel Angel Reina Ortega <
MiguelAngel.ReinaOrtega@etsi.org> wrote:

> Dear,
>
> On behalf of ETSI NFV ISG, I would like to submit the following
> registration requests for the “JSON Web Token” registry:
>
>
>
>    - Claim Name: “scope”
>
>
>    - Claim Description: space-separated list of scope of operation values
>    for which the access token is valid.
>    - Change Controller: ETSI (pnns@etsi.org)
>
>
>    - Specification Document(s): Clause 5.5
>    <https://openid.net/specs/openid-connect-core-1_0.html#StandardClaims>
>    of the present ETSI GS NFV-SEC 022
>    <https://portal.etsi.org/webapp/WorkProgram/Report_WorkItem.asp?WKI_ID=54060>
>    (attached)
>
>
>
>    - Claim Name: “at_use_nbr”
>    - Claim Description: Number of API requests for which the access token
>    can be used.
>    - Change Controller: ETSI (pnns@etsi.org)
>
>
>    - Specification Document(s): Clause 5.5
>    <https://openid.net/specs/openid-connect-core-1_0.html#StandardClaims>
>    of the present ETSI GS NFV-SEC 022
>    <https://portal.etsi.org/webapp/WorkProgram/Report_WorkItem.asp?WKI_ID=54060>
>    (attached)
>
>
>
> Best regards.
>
>
>
>
>
>
> -----------------------------------------------------------------------------------------------------------------
>
> *Miguel Angel Reina Ortega **–* Testing Expert
>
> Centre for Testing and Interoperability (CTI)
>
> *ETSI* ● www.etsi.org ● *miguelangel.reinaortega@etsi.org
> <miguelangel.reinaortega@etsi.org>*
>
> Phone: +33 (0)4 92 94 43 49 ● Mobile: +33 (0)6 76 73 60 99
>
>
>
> This email may contain confidential information and is intended for
>
> the use of the addressee only. Any unauthorized use may be unlawful.
>
> If you receive this email by mistake, please advise the sender
>
> immediately by using the reply facility in your email software.
>
> Thank you for your co-operation.
>
>
> _______________________________________________
> Jwt-reg-review mailing list
> Jwt-reg-review@ietf.org
> https://www.ietf.org/mailman/listinfo/jwt-reg-review
>

-- 
<https://www.pingidentity.com>[image: Ping Identity]
<https://www.pingidentity.com>
Brian Campbell
Distinguished Engineer
bcampbell@pingidentity.com
w: +1 720.317.2061
c: +1 303.918.9415
Connect with us: [image: Glassdoor logo]
<https://www.glassdoor.com/Overview/Working-at-Ping-Identity-EI_IE380907.11,24.htm>
[image:
LinkedIn logo] <https://www.linkedin.com/company/21870> [image: twitter
logo] <https://twitter.com/pingidentity> [image: facebook logo]
<https://www.facebook.com/pingidentitypage> [image: youtube logo]
<https://www.youtube.com/user/PingIdentityTV> [image: Blog logo]
<https://www.pingidentity.com/en/blog.html>
<https://www.pingidentity.com/content/ping/en/lp/d/p14e-trial.html>
<https://www.pingidentity.com/en/lp/d/p14e-trial.html?utm_source=Email&utm_medium=p14e-trial-sso-mfa-emailsig&utm_campaign=p14e-trial-sso-mfa-emailsig>
<https://www.pingidentity.com/en/lp/d/p14e-trial.html?utm_source=Email&utm_medium=p14e-trial-sso-mfa-emailsig&utm_campaign=p14e-trial-sso-mfa-emailsig>
<https://developer.pingidentity.com/en/signup.html>
<https://developer.pingidentity.com/en/signup.html>
<https://developer.pingidentity.com/en/signup.html>
<https://developer.pingidentity.com/en/signup.html?utm_source=email&utm_medium=P14C-Trial-Email&utm_campaign=P14C-Trial-Email&utm_content=link>
<https://developer.pingidentity.com/en/signup.html?utm_source=email&utm_medium=P14C-Trial-Email&utm_campaign=P14C-Trial-Email&utm_content=link>

-- 
_CONFIDENTIALITY NOTICE: This email may contain confidential and privileged 
material for the sole use of the intended recipient(s). Any review, use, 
distribution or disclosure by others is strictly prohibited.  If you have 
received this communication in error, please notify the sender immediately 
by e-mail and delete the message and any file attachments from your 
computer. Thank you._