client_authentication private_key_jwt awkward wording w/ RSA/EC

Issue #824 resolved
Brian Campbell created an issue

http://openid.net/specs/openid-connect-messages-1_0-16.html#client_authentication has:

"private_key_jwt Clients that have registered a public key sign a JWT using the RSA algorithm if a RSA key was registered or the ECDSA algorithm if an Elliptic Curve key was registered (see JWA [JWA] for the algorithm identifiers). "

Admittedly this is nit-picky but couldn't it just say something to the effect of 'clients that have registered a public key sign a JWT using an appropriate corresponding algorithm' or something to the effect? Which would be shorter, say the same thing, and not explicitly call out EC/RSA.

Comments (3)

  1. Log in to comment