Skip to content

Commit 8be32e2

Browse files
authored
Merge pull request #93 from oauth-wg/remove_annex
remove annex as key attestations are moved out of scope for now
2 parents 5d16432 + 0ef8a3a commit 8be32e2

File tree

1 file changed

+1
-33
lines changed

1 file changed

+1
-33
lines changed

draft-ietf-oauth-attestation-based-client-auth.md

+1-33
Original file line numberDiff line numberDiff line change
@@ -457,43 +457,11 @@ This section requests registration of the following scheme in the "Hypertext Tra
457457

458458
--- back
459459

460-
# Additional Examples
461-
462-
## Wallet Instance Attestation
463-
464-
This non-normative example shows a client attestations used as an wallet instance attestation in the context of eIDAS 2.0 {{ARF}}, e.g. to secure a Type-1 configuration credential. The additional claims describe the wallet's device binding und user binding capabilities and the achievable level of assurance.
465-
466-
~~~
467-
{
468-
"typ": "wallet-attestation+jwt",
469-
"alg": "ES256",
470-
"kid": "1"
471-
}
472-
.
473-
{
474-
"iss": "https://attestation-service.com",
475-
"sub": "https://wallet-provider.com",
476-
"iat": 1541493724,
477-
"exp": 1516247022,
478-
"attested_security_context" : "https://eu-trust-list.eu/asc/high",
479-
"cnf": {
480-
"jwk" : {
481-
"kty": "EC",
482-
"crv": "P-256",
483-
"x": "TCAER19Zvu3OHF4j4W4vfSVoHIP1ILilDls7vCeGemc",
484-
"y": "ZxjiWWbZMQGHVWKVQ4hbSIirsVfuecCE6t4jT9F2HZQ"
485-
},
486-
"key_type" : "STRONGBOX",
487-
"user_authentication" : "SYSTEM_PIN"
488-
}
489-
}
490-
491-
~~~
492-
493460
# Document History
494461

495462
-04
496463

464+
* remove key attestation example
497465
* restructured JWT Claims for better readability
498466
* added JOSE typ values for Client Attestation and Client Attestation PoP
499467
* add RATS relation

0 commit comments

Comments
 (0)