[Federation] Specify resolve response JWT claims

The resolve response spec is missing a formal definition of the claims that go into the JWT:

The example has the following top-level claims:

iss - REQUIRED, the the resolve entity ID
sub - REQUIRED, the according to the requested “sub”
iat - REQUIRED, the JWT issue time or the time when the chain was last refreshed?
exp - REQUIRED, the expiration of the trust chain?
metadata - REQUIRED, according to the requested “type”, else for all available types?
trust_marks - REQUIRED, the collected and successfully validated trust marks
trust_chain - OPTIONAL

‌

Comments (3)