[Federation] Editorial: Two missing normative references

[Vladimir Dzhuvinov]

The spec mentions two normative refs (using <xref target="RFCxxxx"/>) that are not present in the “Normative References” section:

https://openid.bitbucket.io/connect/openid-federation-1_0.html#section-17.1

• RFC6749
• RFC8725

‌

[Michael Jones]

The OAuth 2 reference is clearly normative, since we use OAuth 2 protocol elements.

I disagree that the JWT BCP is normative. Implementers can follow the advice in the BCP about preventing cross-JWT confusion by following the Federation spec (using the required “typ” values) without reading any part of RFC 8725.

[Michael Jones]

To be fixed by https://bitbucket.org/openid/connect/pull-requests/739

[Vladimir Dzhuvinov]

Thanks!

[Michael Jones]

Fixed by https://bitbucket.org/openid/connect/pull-requests/739