[OAUTH-WG] Shepherd writeup for the JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens -- Information about Implementations

Hannes Tschofenig <Hannes.Tschofenig@arm.com> Thu, 17 September 2020 12:55 UTC

Return-Path: <Hannes.Tschofenig@arm.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 129813A0A21 for <oauth@ietfa.amsl.com>; Thu, 17 Sep 2020 05:55:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=JRR1vbh0; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=JRR1vbh0
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ws2XI8fLwUaR for <oauth@ietfa.amsl.com>; Thu, 17 Sep 2020 05:55:47 -0700 (PDT)
Received: from FRA01-MR2-obe.outbound.protection.outlook.com (mail-eopbgr90058.outbound.protection.outlook.com [40.107.9.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 85F553A0A10 for <oauth@ietf.org>; Thu, 17 Sep 2020 05:55:47 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=hkLYzCoptZ16741xP2nntTbJq+ZTMXJVd9l/P9r3azI=; b=JRR1vbh0Uh7qaHu2PluhzbHRBSBt7cjEjn/w+T7F0D3QOBPEt7KdBVVAw4tJGcvyA2Tq9WQ/uwub3BIXcfQl1f0Y5TIgG/Xx6OBoaS+Vzq8Rj1GTZ8OOVFvrReQno5hpAWneY4iZJBklSLw3vaHgUhbU1C4SK6rTNp3OSPwIwJk=
Received: from AM6PR02CA0010.eurprd02.prod.outlook.com (2603:10a6:20b:6e::23) by PR2PR08MB4729.eurprd08.prod.outlook.com (2603:10a6:101:17::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3370.16; Thu, 17 Sep 2020 12:55:39 +0000
Received: from AM5EUR03FT030.eop-EUR03.prod.protection.outlook.com (2603:10a6:20b:6e:cafe::94) by AM6PR02CA0010.outlook.office365.com (2603:10a6:20b:6e::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3391.11 via Frontend Transport; Thu, 17 Sep 2020 12:55:39 +0000
X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com;
Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com;
Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM5EUR03FT030.mail.protection.outlook.com (10.152.16.117) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3391.15 via Frontend Transport; Thu, 17 Sep 2020 12:55:38 +0000
Received: ("Tessian outbound 7fc8f57bdedc:v64"); Thu, 17 Sep 2020 12:55:38 +0000
X-CR-MTA-TID: 64aa7808
Received: from 5c860850bff9.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 149D8348-8BC5-4904-B202-2C4E8EE771AF.1; Thu, 17 Sep 2020 12:55:33 +0000
Received: from EUR04-HE1-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 5c860850bff9.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Thu, 17 Sep 2020 12:55:33 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=NsbTIpET9VHTDzOrfAubTeDLmozQ0t8xcziBYX2ib/VlNNGu0Qn0pL5iexM8v/FH6PWrAdaQR5jPO1BFsXvIaVgH85Fh+nJE0YG6Kzivpcb/a7BHJQsHZ3L2Rmkc1QPv1qOc9Mr79eru4MiJWJAQfKSCecGpOJcb+xm9V2qIHRltjDf0jZ8j0zthJEM557ISyixefe7KchNkaHNv3PtKEMg5EpJIk2EeuZCZiWTzFkH7lhEImvNusl+oy4TWqPOcYHISJkF4jTNeF3tTlRlxYu4ifImN4uf49nYYArx2t7KoIzFgp9it+fz+TtQN7r+MgCmaj8YGze4DSuY34qPOXw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=hkLYzCoptZ16741xP2nntTbJq+ZTMXJVd9l/P9r3azI=; b=DpyeNaF/L9hL/OHdEXZQ51rcwNHRJ+zMdKrqTTTdcu7TE2/VOS+0wnXos9hyItNo74IR35GxsQ784Wi4PQ+Q8zRNEzoOsHXL7EoAxn+z2uZX95+Sl/p1huzFEvQBkc82mSrBK0F/w1j0WjOxDjNM9EgzuilIbM2oP9QavRI0/AeZKF29fCecXbFrPAkWVK7MNVqZt1j4Bnb18dc5pOubeQUznsGYwzjpp5NX2EwsfusBxu13pO66WcZyGuLA4xTqFw/u8EfeSWA6H/bTLqpy1njRtZ660Omh8UMcri73dv6ioF2O3yTVio+svhI4ZiZGcY8pxhVrPjt2IXx8x9xM9w==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=hkLYzCoptZ16741xP2nntTbJq+ZTMXJVd9l/P9r3azI=; b=JRR1vbh0Uh7qaHu2PluhzbHRBSBt7cjEjn/w+T7F0D3QOBPEt7KdBVVAw4tJGcvyA2Tq9WQ/uwub3BIXcfQl1f0Y5TIgG/Xx6OBoaS+Vzq8Rj1GTZ8OOVFvrReQno5hpAWneY4iZJBklSLw3vaHgUhbU1C4SK6rTNp3OSPwIwJk=
Received: from AM0PR08MB3716.eurprd08.prod.outlook.com (2603:10a6:208:106::13) by AM4PR08MB2674.eurprd08.prod.outlook.com (2603:10a6:205:a::31) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3348.19; Thu, 17 Sep 2020 12:55:30 +0000
Received: from AM0PR08MB3716.eurprd08.prod.outlook.com ([fe80::900e:c64d:a006:4860]) by AM0PR08MB3716.eurprd08.prod.outlook.com ([fe80::900e:c64d:a006:4860%6]) with mapi id 15.20.3391.015; Thu, 17 Sep 2020 12:55:30 +0000
From: Hannes Tschofenig <Hannes.Tschofenig@arm.com>
To: "oauth@ietf.org" <oauth@ietf.org>, Vittorio Bertocci <vittorio.bertocci@auth0.com>
Thread-Topic: Shepherd writeup for the JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens -- Information about Implementations
Thread-Index: AdaM8dEdw21CEc9ESTmBsuDYycBclw==
Date: Thu, 17 Sep 2020 12:55:29 +0000
Message-ID: <AM0PR08MB3716EA319E1BF88F3A0880C8FA3E0@AM0PR08MB3716.eurprd08.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ts-tracking-id: 27367E054AF3884A9190DB47E51F0861.0
x-checkrecipientchecked: true
Authentication-Results-Original: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=arm.com;
x-originating-ip: [80.92.122.149]
x-ms-publictraffictype: Email
X-MS-Office365-Filtering-HT: Tenant
X-MS-Office365-Filtering-Correlation-Id: 19694f63-fefa-4ae5-495f-08d85b08fa54
x-ms-traffictypediagnostic: AM4PR08MB2674:|PR2PR08MB4729:
X-Microsoft-Antispam-PRVS: <PR2PR08MB4729FC30BEB45A6466B0C304FA3E0@PR2PR08MB4729.eurprd08.prod.outlook.com>
x-checkrecipientrouted: true
nodisclaimer: true
x-ms-oob-tlc-oobclassifiers: OLM:8273;OLM:10000;
X-MS-Exchange-SenderADCheck: 1
X-Microsoft-Antispam-Untrusted: BCL:0;
X-Microsoft-Antispam-Message-Info-Original: n189s6S6PJDaSIRuUqJCsOVmdodjinCCFhLQSe0dLKhap59YeNVWIVYxfQ0QwT4ZSejfMkwWsjbstHmE6m8in08JosFnrztZ5HdinpksqEDPhY/9oS5+4Dop1K9tDqxEp12hUBm3bhHPvmiRSiBSQ91cyzvMDNN9eGjDzn1RhDIRKVyhgxPCbchyZ7qiw69qLezGzfvuvX84mFy6aQ0/r7dXqgUqnCWVWomBJOeB63XU6uc7ndhCrCmZ1j5ybE/Sektir9ViUA+0MaLfEFU9ifeyGpeTOfYqP6+vj6v5FnJbywUEqW/wVJX/Y6J7cI5sz0g6BfvEZE2EM35CFCQVgETy6MlqjuR8fpjr4uMkQHrGj6kXC355/au8VYb5p8b/nJ5keA32QFNeBsiPlY8/4A==
X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM0PR08MB3716.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(39860400002)(136003)(376002)(346002)(366004)(396003)(9686003)(83380400001)(71200400001)(110136005)(55016002)(316002)(2906002)(66476007)(66556008)(66946007)(76116006)(4744005)(33656002)(86362001)(66446008)(52536014)(64756008)(5660300002)(186003)(8936002)(6506007)(7696005)(478600001)(26005)(966005)(8676002); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata: 1VF3+pF7SFQ/cyiaalRmHiDHPwiRyWWLs8qDc9FUiiklo/kzyaiSkZ/Zv4G1Z743XDWnMCb35kX13BGn2p21AP8iMKJAvnd7mh1MekW29LAFhndML1LdSoy0wRXkN4QwePkh4bvLfxabIMp2aEGaJ6Xp1m0RcgmEYjjlVrC9koQbxebbCNH31RFZRdGc0dIhlLHO/B8k8P2uFUARPsBLK5k93jutl72emAkSgL5AfVyPi1K73AiisplFV/tPvNdf//xBBtiMQq/LhS1NytJFV/Zqjb9Rulh2KiX2Wj4R7YPSxAYseaZw8MaiyYYwxRQPEoV/0BxGdFIWXF75RHIUkai3wWsbbm1mBaso4BQqSXVfmCvQAEWMWe8n0s3/rYJKRe+Ig6B5+DFr1OAWSQNKVJdBXa3eA/V4cP4Ua5yqT80YvAWb2ojDNuWeKXYa8KzY2MdTr/DQAAiGr/BL0uV5XS7MNV6oAdy/PPJIOV+0x4wIa0k8m4kc45zkfJrDtX5/W+3UjWVY3paKtPayDoK0Odv5rxFkNdwz/jurAxTh6nlwiRUtrIt7IAjbeGLtbRgmOWh5lPo8lDW56WxVrCU6TtnXBRuVTgBhtd2iz9Ay/ACibSUAbNPWvTQDQa8D/sLDboZt2sFvFvvy8r3XY3lCkw==
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR08MB2674
Original-Authentication-Results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=arm.com;
X-EOPAttributedMessage: 0
X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR03FT030.eop-EUR03.prod.protection.outlook.com
X-MS-Office365-Filtering-Correlation-Id-Prvs: 62bcd561-c8cb-41c5-4b1d-08d85b08f4f9
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 9VEuzJK4maH63fqt9/hGtHrr0jxnchSJGtz0Tc3OzsWx9SsCmjpvgvqx8+S0Ol3I5sLAA6I9D3LKBhyei0CsQEubTSVAiIvNV0zVB8vZrruhR14CZfVcwYDpaobo2B+EIYVrDvJ2IMYrldlmiyuA0S7G8H2zXTtI34plDwOvjImAA7E0oUdNuVXBAupRt+4pDU/1jEDfM6nOIVrfLmHPIxzZQwfk2viHe3mWClVYnW9yO/Cz1t2JcCmUCGAc+LaaEjtxxtGKEX5aP0HhhtgVumL/Kmcz+5h8vZY7+OXzB/5R73XIBg78M0m/MgdND/9SaJQ8VYSrN4oHsVPEkD0df3+3/5Cz2A0dfXCR8lnqaRotuTFuSjd0NB09378tLnL7OW9Xd/2t2o+hZ5O+ffa2qS0CoB0DS/yw2oL+YA+Wa61pu3h6AUhxeHpdOBpX/HCuf1t00CzAmhWHDr0cmGl+sih3qYP6p2goQ7xPiSc6U5s=
X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFS:(4636009)(376002)(396003)(346002)(136003)(39860400002)(46966005)(86362001)(55016002)(33656002)(110136005)(52536014)(966005)(2906002)(26005)(6506007)(83380400001)(82740400003)(5660300002)(7696005)(4744005)(336012)(9686003)(70586007)(8936002)(356005)(36906005)(47076004)(186003)(478600001)(8676002)(81166007)(82310400003)(316002)(70206006); DIR:OUT; SFP:1101;
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Sep 2020 12:55:38.9829 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 19694f63-fefa-4ae5-495f-08d85b08fa54
X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com]
X-MS-Exchange-CrossTenant-AuthSource: AM5EUR03FT030.eop-EUR03.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PR2PR08MB4729
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/skElkbcferE7HxcXIQ1ZN-UUTD8>
Subject: [OAUTH-WG] Shepherd writeup for the JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens -- Information about Implementations
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 17 Sep 2020 12:55:50 -0000

Hi Vittorio, Hi all,

I am working on the shepherd writeup for <draft-ietf-oauth-access-token-jwt> and you can find the latest version here:
https://github.com/hannestschofenig/tschofenig-ids/blob/master/shepherd-writeups/Writeup_OAuth_JWT-Profile-for-AccessTokens.txt

I am in need for information about implementations that are conformant to this specification. This information would be listed in this write-up, as background information to the IESG.

Ciao
Hannes

IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.