[OAUTH-WG] Weekly github digest (OAuth Activity Summary)

[Repository Activity Summary Bot <[e-mail]>]

Events without label "editorial"

Issues
------
* oauth-wg/oauth-identity-chaining (+4/-0/💬0)
  4 issues created:
  - Remove need for additional metadata (by PieterKas)
    https://github.com/oauth-wg/oauth-identity-chaining/issues/101 
  - Clarify client terminology (by PieterKas)
    https://github.com/oauth-wg/oauth-identity-chaining/issues/100 
  - Using different keys for sender constrained tokens (by PieterKas)
    https://github.com/oauth-wg/oauth-identity-chaining/issues/99 
  - Security Considerations on Client authentication (by PieterKas)
    https://github.com/oauth-wg/oauth-identity-chaining/issues/98 

* oauth-wg/oauth-sd-jwt-vc (+1/-0/💬0)
  1 issues created:
  - Document reasons for not using existing JSON query languages (by aaronpk)
    https://github.com/oauth-wg/oauth-sd-jwt-vc/issues/267 

* oauth-wg/oauth-selective-disclosure-jwt (+10/-0/💬3)
  10 issues created:
  - Hash Function Claim value case-sensitivity (by spheroid)
    https://github.com/oauth-wg/oauth-selective-disclosure-jwt/issues/523 
  - The last paragraph of section 10.5 (Issuer Identifier) can be removed (by Denisthemalice)
    https://github.com/oauth-wg/oauth-selective-disclosure-jwt/issues/522 
  - A new section about "Issuer anonymity" should be added (by Denisthemalice)
    https://github.com/oauth-wg/oauth-selective-disclosure-jwt/issues/521 
  - Section 10.3 (Confidentiality during Transport) should also mention integrity (by Denisthemalice)
    https://github.com/oauth-wg/oauth-selective-disclosure-jwt/issues/520 
  - Since claims always contain privacy-sensitive data section 10.2 would need to be reworded (by Denisthemalice)
    https://github.com/oauth-wg/oauth-selective-disclosure-jwt/issues/519 
  - Holders SHOULD NOT be required to store SD-JWTs "only in encrypted form" (by Denisthemalice)
    https://github.com/oauth-wg/oauth-selective-disclosure-jwt/issues/518 
  - Section 10.2 should be made more general to consider both the storage of signed and un-signed data (by Denisthemalice)
    https://github.com/oauth-wg/oauth-selective-disclosure-jwt/issues/517 
  - A new section about "End-User intrackability" should be added (by Denisthemalice)
    https://github.com/oauth-wg/oauth-selective-disclosure-jwt/issues/516 
  - The term "unlinkability" is overloaded. For more clarity, the wording "End-user intrackability" should be used in addition (by Denisthemalice)
    https://github.com/oauth-wg/oauth-selective-disclosure-jwt/issues/515 
  - A section should be added to consider the case of a presentation of claims to Verifier that have been issued by different Issuers (by Denisthemalice)
    https://github.com/oauth-wg/oauth-selective-disclosure-jwt/issues/514 

  2 issues received 3 new comments:
  - #516 A new section about "End-User intrackability" should be added (1 by paulbastian)
    https://github.com/oauth-wg/oauth-selective-disclosure-jwt/issues/516 
  - #489 A (KB-JWT) does not demonstrate a "proof of possession" of private key (2 by Denisthemalice, paulbastian)
    https://github.com/oauth-wg/oauth-selective-disclosure-jwt/issues/489 

* oauth-wg/oauth-v2-1 (+0/-0/💬1)
  1 issues received 1 new comments:
  - #183 Clarify `aud` values that should be accepted in `private_key_jwt` at the token (and other) endpoints (1 by bc-pi)
    https://github.com/oauth-wg/oauth-v2-1/issues/183 



Pull requests
-------------
* oauth-wg/oauth-identity-chaining (+1/-0/💬2)
  1 pull requests submitted:
  - Confirmation data transfer (by arndt-s)
    https://github.com/oauth-wg/oauth-identity-chaining/pull/102 

  2 pull requests received 2 new comments:
  - #102 Confirmation data transfer (1 by arndt-s)
    https://github.com/oauth-wg/oauth-identity-chaining/pull/102 
  - #95 Add sender constrained tokens (redo) (1 by arndt-s)
    https://github.com/oauth-wg/oauth-identity-chaining/pull/95 

* oauth-wg/oauth-transaction-tokens (+0/-1/💬0)
  1 pull requests merged:
  - Minor changes
    https://github.com/oauth-wg/oauth-transaction-tokens/pull/148 

* oauth-wg/draft-ietf-oauth-status-list (+1/-0/💬0)
  1 pull requests submitted:
  - fixes from IETF review (by paulbastian)
    https://github.com/oauth-wg/draft-ietf-oauth-status-list/pull/190 


Repositories tracked by this digest:
-----------------------------------
* https://github.com/oauth-wg/oauth-browser-based-apps
* https://github.com/oauth-wg/oauth-identity-chaining
* https://github.com/oauth-wg/oauth-transaction-tokens
* https://github.com/oauth-wg/oauth-sd-jwt-vc
* https://github.com/oauth-wg/draft-ietf-oauth-resource-metadata
* https://github.com/oauth-wg/oauth-cross-device-security
* https://github.com/oauth-wg/oauth-selective-disclosure-jwt
* https://github.com/oauth-wg/oauth-v2-1
* https://github.com/oauth-wg/draft-ietf-oauth-status-list
* https://github.com/oauth-wg/draft-ietf-oauth-attestation-based-client-auth