Registration - 2.1 token_endpoint signing

Issue #464 duplicate
Edmund Jay created an issue

jwk_url, x509_url mentions using them for token_endpoint signing. I think we should clarify to say that it is for signing the asymmetric client credentials used for authentication.

Comments (4)

  1. Nat Sakimura

    Signing is a word only applied for asymmetric signature. HMAC is just for integrity, so it should be clear, hopefully.

    Duplicate of #474.

  2. Log in to comment