From 9561b988e1fd812f8af992aee1bd77ebac40610f Mon Sep 17 00:00:00 2001 From: Paul Bastian Date: Mon, 21 Oct 2024 01:17:45 +0200 Subject: [PATCH 1/2] remove annex as key attestations are moved out of scope for now --- ...etf-oauth-attestation-based-client-auth.md | 33 ------------------- 1 file changed, 33 deletions(-) diff --git a/draft-ietf-oauth-attestation-based-client-auth.md b/draft-ietf-oauth-attestation-based-client-auth.md index 9b1ad2a..718438c 100644 --- a/draft-ietf-oauth-attestation-based-client-auth.md +++ b/draft-ietf-oauth-attestation-based-client-auth.md @@ -359,39 +359,6 @@ This section requests registration of the following scheme in the "Hypertext Tra --- back -# Additional Examples - -## Wallet Instance Attestation - -This non-normative example shows a client attestations used as an wallet instance attestation in the context of eIDAS 2.0 {{ARF}}, e.g. to secure a Type-1 configuration credential. The additional claims describe the wallet's device binding und user binding capabilities and the achievable level of assurance. - -~~~ -{ - "typ": "wallet-attestation+jwt", - "alg": "ES256", - "kid": "1" -} -. -{ - "iss": "https://attestation-service.com", - "sub": "https://wallet-provider.com", - "iat": 1541493724, - "exp": 1516247022, - "attested_security_context" : "https://eu-trust-list.eu/asc/high", - "cnf": { - "jwk" : { - "kty": "EC", - "crv": "P-256", - "x": "TCAER19Zvu3OHF4j4W4vfSVoHIP1ILilDls7vCeGemc", - "y": "ZxjiWWbZMQGHVWKVQ4hbSIirsVfuecCE6t4jT9F2HZQ" - }, - "key_type" : "STRONGBOX", - "user_authentication" : "SYSTEM_PIN" - } -} - -~~~ - # Document History -04 From 0ef8a3abd3be09254001941410a7dd347bb4bb4c Mon Sep 17 00:00:00 2001 From: Christian Bormann Date: Mon, 21 Oct 2024 21:04:48 +0200 Subject: [PATCH 2/2] add missing document history --- draft-ietf-oauth-attestation-based-client-auth.md | 1 + 1 file changed, 1 insertion(+) diff --git a/draft-ietf-oauth-attestation-based-client-auth.md b/draft-ietf-oauth-attestation-based-client-auth.md index 18e5f25..d91dcb7 100644 --- a/draft-ietf-oauth-attestation-based-client-auth.md +++ b/draft-ietf-oauth-attestation-based-client-auth.md @@ -461,6 +461,7 @@ This section requests registration of the following scheme in the "Hypertext Tra -04 +* remove key attestation example * restructured JWT Claims for better readability * added JOSE typ values for Client Attestation and Client Attestation PoP * add RATS relation