Merge pull request #5870 from hwupathum/request-obj

Add support for request object signature validation

Author: hwupathum

en/includes/references/app-settings/oidc-settings-for-app.md

@@ -242,6 +242,12 @@ Selecting the **Mandatory** option enforces the application to initiate an autho
 
 OAuth 2.0 authorization requests can either include the authorization parameters in URL query strings or in a request object. A request object is typically a JSON Web Token (JWT) which encapsulates the authorization parameters. It can be signed and encrypted to respectively ensure data integrity and data confidentiality.
 
+{% if product_name == "Asgardeo" or (product_name == "WSO2 Identity Server" and is_version > "7.2.0" ) %}
+
+- **Enable signature validation** - Select this to accept only signed request objects. {{ product_name }} will reject unsigned request objects when you enable this option.
+
+{% endif %}
+
 - Under **Request object signing algorithm**, select a supported algorithm with which the request object will be signed.
 
 - Under **Request object encryption algorithm**, choose a supported asymmetric encryption algorithm to perform the key exchange.