Skip to content

Commit 3442477

Browse files
authored
Fix description of error code for invalid state (#182)
1 parent 868ca72 commit 3442477

File tree

1 file changed

+21
-2
lines changed

1 file changed

+21
-2
lines changed

openid-sharedsignals-framework-1_0.md

+21-2
Original file line numberDiff line numberDiff line change
@@ -1761,8 +1761,8 @@ sub_id
17611761
Upon receiving a Verification Event, the Event Receiver SHALL parse the SET and
17621762
validate its claims. In particular, the Event Receiver SHALL confirm that the
17631763
value for "state" is as expected. If the value of "state" does not match, an
1764-
error response of "setData" SHOULD be returned (see Section 2.3 of
1765-
{{RFC8935}} or {{RFC8936}}).
1764+
error response with the "err" field set to "invalid_state" SHOULD be returned (see Section 2.4 of
1765+
{{RFC8935}} or Section 2.4.4 of {{RFC8936}}).
17661766

17671767
In many cases, Event Transmitters MAY disable or suspend an Event Stream that
17681768
fails to successfully verify based on the acknowledgement or lack of
@@ -2187,6 +2187,25 @@ Subject Identifiers for Security Event Tokens {{RFC9493}} specification.
21872187
The `ssf-configuration` well-known endpoint is registered in IANA's Well-Known URIs
21882188
registry, as defined by {{RFC8615}}.
21892189

2190+
IANA is asked to assign the error code "invalid_state", as defined in {{verification-event}}, to the
2191+
Security Event Token Error Codes section of the Security Event Token registry, as defined
2192+
in Section 7.1 of {{RFC8935}}. The following information is provided as required by the
2193+
registration template:
2194+
2195+
Error Code
2196+
2197+
> invalid_state
2198+
2199+
Description
2200+
2201+
> Indicates that a Verification event contained a "state" claim that does not
2202+
match the value expected by the Receiver.
2203+
2204+
Change Controller
2205+
2206+
> OpenID - Shared Signals Working Group
2207+
2208+
21902209
--- back
21912210

21922211
# Acknowledgements

0 commit comments

Comments
 (0)