[OAUTH-WG] JSON Web Token (JWT) Specification Draft -08
Mike Jones <Michael.Jones@microsoft.com> Tue, 13 March 2012 01:07 UTC
Return-Path: <Michael.Jones@microsoft.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 689A011E8083 for <oauth@ietfa.amsl.com>; Mon, 12 Mar 2012 18:07:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.829
X-Spam-Level:
X-Spam-Status: No, score=-3.829 tagged_above=-999 required=5 tests=[AWL=-0.231, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ntTMgTIb6-pK for <oauth@ietfa.amsl.com>; Mon, 12 Mar 2012 18:07:28 -0700 (PDT)
Received: from db3outboundpool.messaging.microsoft.com (db3ehsobe006.messaging.microsoft.com [213.199.154.144]) by ietfa.amsl.com (Postfix) with ESMTP id 50D0D11E8079 for <oauth@ietf.org>; Mon, 12 Mar 2012 18:07:27 -0700 (PDT)
Received: from mail43-db3-R.bigfish.com (10.3.81.240) by DB3EHSOBE002.bigfish.com (10.3.84.22) with Microsoft SMTP Server id 14.1.225.23; Tue, 13 Mar 2012 01:07:26 +0000
Received: from mail43-db3 (localhost [127.0.0.1]) by mail43-db3-R.bigfish.com (Postfix) with ESMTP id 4DDB8E0574 for <oauth@ietf.org>; Tue, 13 Mar 2012 01:07:26 +0000 (UTC)
X-SpamScore: -19
X-BigFish: VS-19(zzc85fhzz1202hzz1033IL8275eh8275bh8275dha1495iz2fh2a8h668h839h)
X-Forefront-Antispam-Report: CIP:131.107.125.8; KIP:(null); UIP:(null); IPV:NLI; H:TK5EX14MLTC102.redmond.corp.microsoft.com; RD:none; EFVD:NLI
Received-SPF: pass (mail43-db3: domain of microsoft.com designates 131.107.125.8 as permitted sender) client-ip=131.107.125.8; envelope-from=Michael.Jones@microsoft.com; helo=TK5EX14MLTC102.redmond.corp.microsoft.com ; icrosoft.com ;
Received: from mail43-db3 (localhost.localdomain [127.0.0.1]) by mail43-db3 (MessageSwitch) id 1331600843664885_14575; Tue, 13 Mar 2012 01:07:23 +0000 (UTC)
Received: from DB3EHSMHS006.bigfish.com (unknown [10.3.81.227]) by mail43-db3.bigfish.com (Postfix) with ESMTP id 9D8E9C0049 for <oauth@ietf.org>; Tue, 13 Mar 2012 01:07:23 +0000 (UTC)
Received: from TK5EX14MLTC102.redmond.corp.microsoft.com (131.107.125.8) by DB3EHSMHS006.bigfish.com (10.3.87.106) with Microsoft SMTP Server (TLS) id 14.1.225.23; Tue, 13 Mar 2012 01:07:23 +0000
Received: from TK5EX14MBXC284.redmond.corp.microsoft.com ([169.254.1.237]) by TK5EX14MLTC102.redmond.corp.microsoft.com ([157.54.79.180]) with mapi id 14.02.0283.004; Tue, 13 Mar 2012 01:07:21 +0000
From: Mike Jones <Michael.Jones@microsoft.com>
To: "oauth@ietf.org" <oauth@ietf.org>
Thread-Topic: JSON Web Token (JWT) Specification Draft -08
Thread-Index: Ac0AtZ2VWOQ/geNTRauMlubauujftQ==
Date: Tue, 13 Mar 2012 01:07:20 +0000
Message-ID: <4E1F6AAD24975D4BA5B168042967394366418016@TK5EX14MBXC284.redmond.corp.microsoft.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [157.54.51.79]
Content-Type: multipart/alternative; boundary="_000_4E1F6AAD24975D4BA5B168042967394366418016TK5EX14MBXC284r_"
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
Subject: [OAUTH-WG] JSON Web Token (JWT) Specification Draft -08
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 13 Mar 2012 01:07:29 -0000
Draft 08 of the JSON Web Token (JWT) specification<http://tools.ietf.org/html/draft-jones-json-web-token-08> has been published. It uses the -01 versions of the JOSE specifications<http://self-issued.info/?p=688> and also contains these changes: * Removed language that required that a JWT must have three parts. Now the number of parts is explicitly dependent upon the representation of the underlying JWS or JWE. * Moved the "alg":"none" definition to the JWS spec. * Registered the application/jwt MIME Media Type. * Clarified that the order of the creation and validation steps is not significant in cases where there are no dependencies between the inputs and outputs of the steps. * Corrected the Magic Signatures and Simple Web Token (SWT) references. This specification is available at: * http://tools.ietf.org/html/draft-jones-json-web-token-08 An HTML formatted version is available at: * http://self-issued.info/docs/draft-jones-json-web-token-08.html -- Mike