New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

COMMENT: Authenticator construction #420

Closed

chris-wood opened this issue Aug 1, 2023 · 0 comments · Fixed by #424

Labels

Collaborator

chris-wood commented Aug 1, 2023

** Section 2.2.

"authenticator" is a Nk-octet authenticator that covers the
preceding fields in the token. The value of this field is defined
by the token_type and corresponding issuance protocol. The value
of constant Nk depends on token_type, as defined in Section 5.2.

-- Could a bit more be said about the purpose of this field. Please also
explain what “cover” means in this context.

-- Will the security properties of these authenticators vary by token_type? If
so, please explicitly state that?

chris-wood added the auth-scheme label

chris-wood mentioned this issue

Clearly specify token verification steps #424

Merged

chris-wood closed this as completed in #424

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment