IANA Consideration: Explicit Typing?

[Nat Sakimura]

Perhaps we should add explicit typing in the JAR. Type being application/oauth-jar+jwt.

This, however, adds IANA consideration.

If we are adding, the example in section 5 needs to be updated. Right now, it is just using application/jwt

[Edmund Jay]

There isn't any normative text that says the content-type needs to be "application/jwt" or otherwise. Only in the examples. How is this "application/oauth-jar+jwt" any different than a "application/jwt" type?

[Nat Sakimura]

Hmm. You are right. Then, perhaps we should stick to application/jwt. That's the minimalist way of approaching it, right?

[Edmund Jay]

Yes, unless we want to write a section explaining the specifics or differences and then also register the type. Also, do you think we should specify the return type in the response like the examples?