JARM JWE-only language is not consistent with JARM

[Oliver Terbu]

The current extension of JARM to use JWE only (with no JWS) is not consistent with the JARM spec. We should omit iss, aud an exp in the JWT Claims Set if only JWE was used. Furthermore, processing rules defined in JARM regarding JWS and these claims don’t apply.

[Oliver Terbu]

Updated:

PR is here https://bitbucket.org/openid/connect/pull-requests/478

[Oliver Terbu]

`iss`, aud and exp don’t really have value if JWE only is used. We should make: iss, aud and exp optional and explicitly state which processing rules defined in JARM don’t apply for those claims and for checking the JWS signature.

[Oliver Terbu]

resolved by merging https://bitbucket.org/openid/connect/pull-requests/478

[Kristina Yasuda]

PR merged.