Skip to content

Commit

Permalink
Mnr changes.
Browse files Browse the repository at this point in the history
  • Loading branch information
adeinega committed Jul 7, 2024
1 parent ca62df0 commit c753bdf
Showing 1 changed file with 1 addition and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -133,7 +133,7 @@ As countermeasures against replay attacks and various forms of misuse, an author
- a value in the subject_token_type parameter MUST correspond to an actual type of a security token provided in the subject_token parameter ({{RFC8693}}).
These countermeasures become even more significant when an entity issuing security tokens and an AS performing exchange of them reside in different security domains.

An extra care should be taken for tokens that can be passed around using the front channel, and those tokens that do not explicitly define their type. Examples here would be OpenID Connect ID Token, and various assertions represented as JWTs.
An extra care should be taken for tokens that can be passed around using the front channel, and for those tokens that do not explicitly define their type. Examples here would be OpenID Connect ID Token, and various assertions represented as JWTs.

TODO Security - data loss in token translation may impact authZ decisions. Be careful when allowing multiple token translations since losses may grow over each step of translation.

Expand Down

0 comments on commit c753bdf

Please sign in to comment.