You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: draft-ietf-oauth-transaction-tokens.md
+3-2Lines changed: 3 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -519,9 +519,9 @@ To request a Txn-Token the workload invokes the OAuth 2.0 {{RFC6749}} token endp
519
519
The type of the `subject_token` field is identified by `subject_token_type`.
520
520
* `subject_token_type` REQUIRED. The value MUST indicate the type of the token or value present in the `subject_token` parameter
521
521
522
-
The following additional parameters MAY be present in a Txn-Token Request:
522
+
The following additional parameters are RECOMMENDED to be present in a Txn-Token Request:
523
523
524
-
* `request_context` OPTIONAL. This parameter contains a base64url encoded JSON object which represents the context of this transaction. The parameter SHOULD be present and how the Transaction Token Service uses this parameter is out of scope for this specification.
524
+
* `request_context` OPTIONAL. This parameter contains a base64url encoded JSON object which represents the context of this transaction.
525
525
* `request_details` OPTIONAL. This parameter contains a base64url encoded JSON object which represents additional details of the transaction that MUST remain immutable throughout the processing of the transaction by multiple workloads. The Transaction Token Service uses this information to construct the `tctx` claim.
526
526
527
527
The figure below {{figtxtokenrequest}} shows a non-normative example of a Txn-Token Request.
@@ -780,6 +780,7 @@ The authors would like to thank the contributors and the OAuth working group mem
780
780
# Document History
781
781
{: numbered="false"}
782
782
[[ To be removed from final specification ]]
783
+
* Remove contradiction in "request_details" description and simpliffy normative langugage [Clarify claim usage](https://github.com/oauth-wg/oauth-transaction-tokens/issues/228).
0 commit comments