Skip to content

Commit

Permalink
Merge pull request #93 from oauth-wg/remove_annex
Browse files Browse the repository at this point in the history
remove annex as key attestations are moved out of scope  for now
  • Loading branch information
c2bo authored Oct 21, 2024
2 parents 5d16432 + 0ef8a3a commit 8be32e2
Showing 1 changed file with 1 addition and 33 deletions.
34 changes: 1 addition & 33 deletions draft-ietf-oauth-attestation-based-client-auth.md
Original file line number Diff line number Diff line change
Expand Up @@ -457,43 +457,11 @@ This section requests registration of the following scheme in the "Hypertext Tra

--- back

# Additional Examples

## Wallet Instance Attestation

This non-normative example shows a client attestations used as an wallet instance attestation in the context of eIDAS 2.0 {{ARF}}, e.g. to secure a Type-1 configuration credential. The additional claims describe the wallet's device binding und user binding capabilities and the achievable level of assurance.

~~~
{
"typ": "wallet-attestation+jwt",
"alg": "ES256",
"kid": "1"
}
.
{
"iss": "https://attestation-service.com",
"sub": "https://wallet-provider.com",
"iat": 1541493724,
"exp": 1516247022,
"attested_security_context" : "https://eu-trust-list.eu/asc/high",
"cnf": {
"jwk" : {
"kty": "EC",
"crv": "P-256",
"x": "TCAER19Zvu3OHF4j4W4vfSVoHIP1ILilDls7vCeGemc",
"y": "ZxjiWWbZMQGHVWKVQ4hbSIirsVfuecCE6t4jT9F2HZQ"
},
"key_type" : "STRONGBOX",
"user_authentication" : "SYSTEM_PIN"
}
}

~~~

# Document History

-04

* remove key attestation example
* restructured JWT Claims for better readability
* added JOSE typ values for Client Attestation and Client Attestation PoP
* add RATS relation
Expand Down

0 comments on commit 8be32e2

Please sign in to comment.