Rename Issuance Initiation `issuer` parameter to `iss`

[Thomas Bellebaum]

Invocations of the Issuance Initiation Endpoint (potentially via a redirect) require a parameter called issuer, identifying the OP. There is a similar parameter for Authorization Responses defined in RFC 9207: iss

While the use case there is slightly different (prevent mix-up attacks), I think we should use one parameter name consistently to simplify the spec.

[Michael Jones]

The iss claim is already defined for use in OAuth requests - see https://www.ietf.org/rfc/rfc9101.html#name-request-object-2. We cannot overload iss with two meanings.

I believe that this issue should be closed on this basis.

[Kristina Yasuda]

agreed to Mike’s comments.

[Kristina Yasuda]

Closing.