[OAUTH-WG] Weekly github digest (OAuth Activity Summary)

[Repository Activity Summary Bot <[e-mail]>]

Events without label "editorial"

Issues
------
* oauth-wg/oauth-transaction-tokens (+0/-2/💬2)
  2 issues received 2 new comments:
  - #206 Relation of purpose to scope validated at API gateway (1 by PieterKas)
    https://github.com/oauth-wg/oauth-transaction-tokens/issues/206 
  - #200 Constrain txn-token header field to a single value (1 by PieterKas)
    https://github.com/oauth-wg/oauth-transaction-tokens/issues/200 [WGLC Feedback] 

  2 issues closed:
  - Rationale for 'txn' being REQUIRED https://github.com/oauth-wg/oauth-transaction-tokens/issues/193 [WGLC Feedback] 
  - Revise Normative Langugage https://github.com/oauth-wg/oauth-transaction-tokens/issues/210 [WGLC Feedback] 

* oauth-wg/oauth-sd-jwt-vc (+0/-1/💬9)
  6 issues received 9 new comments:
  - #355 A new field called "Issuer Authorization URI - "iss_auth"" (1 by cre8)
    https://github.com/oauth-wg/oauth-sd-jwt-vc/issues/355 
  - #346 Support of the default Issuer Signature Mechanism. Required or not? (1 by bc-pi)
    https://github.com/oauth-wg/oauth-sd-jwt-vc/issues/346 [discuss] 
  - #326 No more DIDs in 3.5 of draft 10 (1 by danielfett)
    https://github.com/oauth-wg/oauth-sd-jwt-vc/issues/326 
  - #323 Should `sd` `allowed` be used by issuers? (4 by babisRoutis, bc-pi)
    https://github.com/oauth-wg/oauth-sd-jwt-vc/issues/323 
  - #314 Declaration of arrays to the type metadata. (1 by bc-pi)
    https://github.com/oauth-wg/oauth-sd-jwt-vc/issues/314 [Ready-for-PR] 
  - #223 I18N for Metadata (1 by bc-pi)
    https://github.com/oauth-wg/oauth-sd-jwt-vc/issues/223 [discuss] [Ready-for-PR] [metadata] [PRIO] 

  1 issues closed:
  - No more DIDs in 3.5 of draft 10 https://github.com/oauth-wg/oauth-sd-jwt-vc/issues/326 

* oauth-wg/draft-ietf-oauth-attestation-based-client-auth (+1/-0/💬2)
  1 issues created:
  - Attestation-based authenticated Client. Public or Confidential? (by babisRoutis)
    https://github.com/oauth-wg/draft-ietf-oauth-attestation-based-client-auth/issues/152 

  1 issues received 2 new comments:
  - #152 Attestation-based authenticated Client. Public or Confidential? (2 by babisRoutis, jogu)
    https://github.com/oauth-wg/draft-ietf-oauth-attestation-based-client-auth/issues/152 

* oauth-wg/oauth-identity-assertion-authz-grant (+1/-0/💬2)
  1 issues created:
  - Add scope to 6.1 processing rules (by aaronpk)
    https://github.com/oauth-wg/oauth-identity-assertion-authz-grant/issues/49 

  1 issues received 2 new comments:
  - #39 Adopt Tenant Claim from OpenID Enterprise Extensions for ID-JAG (2 by mcguinness, meghnadubey)
    https://github.com/oauth-wg/oauth-identity-assertion-authz-grant/issues/39 

* oauth-wg/draft-ietf-oauth-rfc8725bis (+0/-1/💬0)
  1 issues closed:
  - Comments from Dan Moore https://github.com/oauth-wg/draft-ietf-oauth-rfc8725bis/issues/14 

* oauth-wg/draft-ietf-oauth-rfc7523bis (+0/-1/💬2)
  2 issues received 2 new comments:
  - #14 changes after changes from one morning in Bangkok (1 by bc-pi)
    https://github.com/oauth-wg/draft-ietf-oauth-rfc7523bis/issues/14 
  - #9 Given the suggested changes, how should a client use a SAML assertion as authorization grant? (1 by panva)
    https://github.com/oauth-wg/draft-ietf-oauth-rfc7523bis/issues/9 

  1 issues closed:
  - Given the suggested changes, how should a client use a SAML assertion as authorization grant? https://github.com/oauth-wg/draft-ietf-oauth-rfc7523bis/issues/9 



Pull requests
-------------
* oauth-wg/oauth-transaction-tokens (+3/-2/💬0)
  3 pull requests submitted:
  - Remove prohibition on returning expires_in and scope (by PieterKas)
    https://github.com/oauth-wg/oauth-transaction-tokens/pull/259 
  - `txn` remains unchanged in a replacement transaction token (by PieterKas)
    https://github.com/oauth-wg/oauth-transaction-tokens/pull/258 
  - Change to Standards Track from Informational (by PieterKas)
    https://github.com/oauth-wg/oauth-transaction-tokens/pull/257 

  2 pull requests merged:
  - `txn` remains unchanged in a replacement transaction token
    https://github.com/oauth-wg/oauth-transaction-tokens/pull/258 
  - MUST instead of MAY on transaction lifetime
    https://github.com/oauth-wg/oauth-transaction-tokens/pull/256 

* oauth-wg/oauth-sd-jwt-vc (+0/-0/💬6)
  2 pull requests received 6 new comments:
  - #359 Proposal for recommendation for sd and how extended types use it (1 by bc-pi)
    https://github.com/oauth-wg/oauth-sd-jwt-vc/pull/359 
  - #335 fix: update logo and background structure (5 by bc-pi, cre8)
    https://github.com/oauth-wg/oauth-sd-jwt-vc/pull/335 

* oauth-wg/draft-ietf-oauth-rfc8725bis (+0/-2/💬0)
  2 pull requests merged:
  - More substantial edits by Dan Moore
    https://github.com/oauth-wg/draft-ietf-oauth-rfc8725bis/pull/25 
  - Dan Moore's comments - the editorial part
    https://github.com/oauth-wg/draft-ietf-oauth-rfc8725bis/pull/23 

* oauth-wg/draft-ietf-oauth-rfc7523bis (+2/-0/💬2)
  2 pull requests submitted:
  - misc additional changes  (by bc-pi)
    https://github.com/oauth-wg/draft-ietf-oauth-rfc7523bis/pull/19 
  - client to ensure JAG audience makes sense (by bc-pi)
    https://github.com/oauth-wg/draft-ietf-oauth-rfc7523bis/pull/18 

  2 pull requests received 2 new comments:
  - #19 misc additional changes  (1 by bc-pi)
    https://github.com/oauth-wg/draft-ietf-oauth-rfc7523bis/pull/19 
  - #18 client to ensure AAG audience makes sense (1 by bc-pi)
    https://github.com/oauth-wg/draft-ietf-oauth-rfc7523bis/pull/18 


Repositories tracked by this digest:
-----------------------------------
* https://github.com/oauth-wg/oauth-browser-based-apps
* https://github.com/oauth-wg/oauth-identity-chaining
* https://github.com/oauth-wg/oauth-transaction-tokens
* https://github.com/oauth-wg/oauth-sd-jwt-vc
* https://github.com/oauth-wg/draft-ietf-oauth-resource-metadata
* https://github.com/oauth-wg/oauth-cross-device-security
* https://github.com/oauth-wg/oauth-selective-disclosure-jwt
* https://github.com/oauth-wg/oauth-v2-1
* https://github.com/oauth-wg/draft-ietf-oauth-status-list
* https://github.com/oauth-wg/draft-ietf-oauth-attestation-based-client-auth
* https://github.com/oauth-wg/oauth-identity-assertion-authz-grant
* https://github.com/oauth-wg/draft-ietf-oauth-rfc8725bis
* https://github.com/oauth-wg/draft-ietf-oauth-rfc7523bis
* https://github.com/oauth-wg/oauth-first-party-apps


-- 
To have a summary like this sent to your list, see: https://github.com/ietf-github-services/activity-summary