[Federation] Explicitly typed JWTs for the entity statements and trust marks?

[Vladimir Dzhuvinov]

I noticed the federation JWTs are not explicitly typed, even though there are now MIME types for the enveloping HTTP responses:

• application/entity-statement+jwt
• application/trust-mark+jwt

Today I saw so many types of JWTs in slides covering the broader Italian federation ecosystem, which instantly reminded me why explicit typing is a good thing :)

[Giuseppe De Marco]

Thank you Vlad!
You call to action would be to explicitly define the typ header to all the non normative examples of the JWTs.

if you can point out the parts of the text where the changes would be appreciated I’ll propose a PR for that asap, otherwise I’ll take some time

‌

[Vladimir Dzhuvinov]

I’ll just go ahead and prepare the RP, this will be easier for me. And so we can also free you for other things, like the EU wallet

[Michael Jones]

Vladimir, could you please create the PR in the next few days? Giuseppe and Roland and I are in Trieste together this week for the TNC/REFEDS conference, and having it while we’re here could facilitate discussing any issues with it. Thanks!

[Vladimir Dzhuvinov]

Submitted a PR:

https://bitbucket.org/openid/connect/pull-requests/204/federation-explicitly-type-entity-and

[Michael Jones]

Assigned to @Vladimir Dzhuvinov

[Michael Jones]

Fixed by https://bitbucket.org/openid/connect/pull-requests/204