Trust mark non normative example in entity statements

[Giuseppe De Marco]

We want to have a non normative example of trust mark in the specs

here a proposal, with the id claim for human readability

‌

{
  "iss": "https://rp.example.it/spid",
  "sub": "https://rp.example.it/spid",
  "iat": 1516239022,
  "exp": 1516298022,
  “trust_marks”: [
     {“id”: “https://www.spid.gov.it/certification/rp”,
      “trust_mark”:
“eyJhbGciOiJSUzI1NiIsImtpZCI6ImRGRTFjMFF4UzBFdFFrWmxNRXR3ZWxOQlExSjRaVmxGTlhWUU1IcEZYelZ1Y0V4c1FuZzRlbXMxYXcifQ.eyJpc3MiOiJodHRwczovL3d3dy5hZ2lkLmdvdi5pdCIsInN1YiI6Imh0dHBzOi8vcnAuZXhhbXBsZS5pdC9zcGlkIiwiaWF0IjoxNTc5NjIxMTYwLCJpZCI6Imh0dHBzOi8vd3d3LnNwaWQuZ292Lml0L2NlcnRpZmljYXRpb24vcnAiLCJtYXJrIjoiaHR0cHM6Ly93d3cuYWdpZC5nb3YuaXQvdGhlbWVzL2N1c3RvbS9hZ2lkL2xvZ28uc3ZnIiwicmVmIjoiaHR0cHM6Ly9kb2NzLml0YWxpYS5pdC9pdGFsaWEvc3BpZC9zcGlkLXJlZ29sZS10ZWNuaWNoZS1vaWRjL2l0L3N0YWJpbGUvaW5kZXguaHRtbCJ9.r2SZDNlYvPAuCq8HnGSkCF17gvexEz_UhqPHfX0js5bjz_n_3QAbr8IVE6_5Um9grYfcc1YUwUGs_-s-_AN8uMsS6P3fL0zpjoEMIOMmkCMsn8F68zisNZ2SEJN_JEIp_FmG5Yf0ONHq9bCtc32fvCSo0daEGTQdMMCEfNSoIZNTMxsB8-bA4hVn9dkNYzGTvg7FHiHOP-_fEyFDlJr1AzgepIwRiApViRVVqX920GY624nHHbEXqv3xleX7mSE6uXSGqRMlVz6XFXLmceJsYvcaC0haC-JfOn2GR7D3C07Lt4TlBUVMM0f2DvZcC1CqWlxoXr3WxzdGD_CxGkYTIg”
}
  ],
  "metadata": {

...

‌

[Giuseppe De Marco]

I should have spent some words on the content of the mark, as obvious is in JWT format and this is its content

{
  "iss": "<https://www.agid.gov.it",>
  "sub": "<https://rp.example.it/spid",>
  "iat": 1579621160,
  "id": "<https://www.spid.gov.it/certification/rp",>
  "mark": "<https://www.agid.gov.it/themes/custom/agid/logo.svg",>
  "ref": "<https://docs.italia.it/italia/spid/spid-regole-tecniche-oidc/it/stabile/index.html">
}

this trust mark, for example, certifies that the entity subject to the mark has a proven adherence to the basic RP profile, with a documentation url in the ref claim

[Michael Jones]

I believe that https://bitbucket.org/openid/connect/pull-requests/106 fixes this issue.

[Giuseppe De Marco]

I agree, usually I close an issue when the relating PR have been merged, anyway we can move the discussion in a single place, where’s actually the PR is