1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. HEART
  4. Issues

"sub" in JWT

Issue #3 resolved
Justin Richer created an issue

Do we want to require sub in all JWTs? This could be privacy-leaking since it references a person not a software component.

Either make it optional or remove reference entirely.

Either way, the example doesn't include it.

Comments (1)

  2. Log in to comment
Assignee
–
Type
bug
Priority
major
Status
resolved
Component
–
Votes
0
Watchers
1
Jira: the preferred issue tracker for Bitbucket. Join the team!