Re: [OAUTH-WG] OAuth Discovery metadata values added for revocation, introspection, and PKCE

Hi Mike,

the current revocation RFC does not support request signing. So what is 
the intention of revocation_endpoint_auth_signing_alg_values_supported?

best regards,
Torsten.

Am 28.01.2016 um 20:27 schrieb Mike Jones:
>
> The OAuth Discovery specification has been updated to add metadata 
> values for revocation <http://tools.ietf.org/html/rfc7009>, 
> introspection <http://tools.ietf.org/html/rfc7662>, and PKCE 
> <http://tools.ietf.org/html/rfc7636>.  Changes were:
>
> ·Added “revocation_endpoint_auth_methods_supported” and 
> “revocation_endpoint_auth_signing_alg_values_supported” for the 
> revocation endpoint.
>
> ·Added “introspection_endpoint_auth_methods_supported” and 
> “introspection_endpoint_auth_signing_alg_values_supported” for the 
> introspection endpoint.
>
> ·Added “code_challenge_methods_supported” for PKCE.
>
> The specification is available at:
>
> ·http://tools.ietf.org/html/draft-jones-oauth-discovery-01
>
> An HTML-formatted version is also available at:
>
> ·http://self-issued.info/docs/draft-jones-oauth-discovery-01.html
>
> -- Mike
>
> P.S.  This note was also published at http://self-issued.info/?p=1531 
> <http://self-issued.info/?p=1531> and as @selfissued 
> <https://twitter.com/selfissued>.
>
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth