Skip to content

Commit baba770

Browse files
committed
remove duplication from messy merge
1 parent a099311 commit baba770

File tree

1 file changed

+0
-40
lines changed

1 file changed

+0
-40
lines changed

draft-ietf-oauth-attestation-based-client-auth.md

-40
Original file line numberDiff line numberDiff line change
@@ -131,46 +131,6 @@ The Remote Attestation Procedures (RATS) architecture defined by {{RFC9334}} has
131131
- a RATS "Attestion Result" relates to the "Client Attestation JWT" defined by this specification
132132
- a RATS "Endorser", "Reference Value Provider", "Endorsement", "Evidence" and "Policies and Reference Values" are out of scope for this specification
133133

134-
# Client Attestation
135-
136-
This draft introduces the concept of client attestations to the OAuth 2 protocol, using two JWTs: a Client Attestation and a Client Attestation Proof of Possession (PoP). These JWTs are transmitted via HTTP headers in an HTTP request from a Client Instance to an Authorization Server or Resource Server. The primary purpose of these headers is to authenticate the Client Instance.
137-
138-
## Client Attestation HTTP Headers {#headers}
139-
140-
A Client Attestation JWT and Client Attestation PoP JWT is included in an HTTP request using the following request header fields.
141-
142-
OAuth-Client-Attestation:
143-
: A JWT that conforms to the structure and syntax as defined in [](#client-attestation-jwt)
144-
145-
OAuth-Client-Attestation-PoP:
146-
: A JWT that adheres to the structure and syntax as defined in [](#client-attestation-pop-jwt)
147-
148-
The following is an example of the OAuth-Client-Attestation header.
149-
150-
~~~
151-
OAuth-Client-Attestation: eyJhbGciOiAiRVMyNTYiLCJraWQiOiAiMTEifQ.eyJ\
152-
pc3MiOiJodHRwczovL2NsaWVudC5leGFtcGxlLmNvbSIsInN1YiI6Imh0dHBzOi8vY2x\
153-
pZW50LmV4YW1wbGUuY29tIiwibmJmIjoxMzAwODE1NzgwLCJleHAiOjEzMDA4MTkzODA\
154-
sImNuZiI6eyJqd2siOnsia3R5IjoiRUMiLCJ1c2UiOiJzaWciLCJjcnYiOiJQLTI1NiI\
155-
sIngiOiIxOHdITGVJZ1c5d1ZONlZEMVR4Z3BxeTJMc3pZa01mNko4bmpWQWlidmhNIiw\
156-
ieSI6Ii1WNGRTNFVhTE1nUF80Zlk0ajhpcjdjbDFUWGxGZEFnY3g1NW83VGtjU0EifX1\
157-
9.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c
158-
~~~
159-
160-
The following is an example of the OAuth-Client-Attestation-PoP header.
161-
162-
~~~
163-
OAuth-Client-Attestation-PoP: eyJhbGciOiJFUzI1NiJ9.ewogICJpc3MiOiAia\
164-
HR0cHM6Ly9jbGllbnQuZXhhbXBsZS5jb20iLAogICJhdWQiOiAi\aHR0cHM6Ly9hcy5l\
165-
eGFtcGxlLmNvbSIsCiAgIm5iZiI6MTMwMDgxNTc4MCwKICAiZXhwIjoxMzAwODE5Mzgw\
166-
LAogICJqdGkiOiAiZDI1ZDAwYWItNTUyYi00NmZjLWFlMTktOThmNDQwZjI1MDY0IiwK\
167-
ICAibm9uY2UiIDogIjVjMWE5ZTEwLTI5ZmYtNGMyYi1hZTczLTU3YzA5NTdjMDljNCIK\
168-
fQ.coB_mtdXwvi9RxSMzbIey8GVVQLv9qQrBUqmc1qj9Bs
169-
~~~
170-
171-
Note that per {{RFC9110}} header field names are case-insensitive; so OAUTH-CLIENT-ATTESTATION, oauth-client-attestation, etc., are all valid and equivalent
172-
header field names. Case is significant in the header field value, however.
173-
174134
# Client Attestation Format
175135

176136
This draft introduces the concept of client attestations to the OAuth 2 protocol, using two JWTs: a Client Attestation and a Client Attestation Proof of Possession (PoP). The primary purpose of these JWTs is to authenticate the Client Instance. These JWTs can be transmitted via HTTP headers in an HTTP request (as described in [](#headers)) from a Client Instance to an Authorization Server or Resource Server, or via a concatenated serialization (as described in [](#alternative-representation)) to enable usage outside of the traditional OAuth2 ecosystem .

0 commit comments

Comments
 (0)