@@ -1761,8 +1761,8 @@ sub_id
1761
1761
Upon receiving a Verification Event, the Event Receiver SHALL parse the SET and
1762
1762
validate its claims. In particular, the Event Receiver SHALL confirm that the
1763
1763
value for "state" is as expected. If the value of "state" does not match, an
1764
- error response of "setData" SHOULD be returned (see Section 2.3 of
1765
- {{RFC8935}} or {{RFC8936}}).
1764
+ error response with the "err" field set to "invalid_state" SHOULD be returned (see Section 2.4 of
1765
+ {{RFC8935}} or Section 2.4.4 of {{RFC8936}}).
1766
1766
1767
1767
In many cases, Event Transmitters MAY disable or suspend an Event Stream that
1768
1768
fails to successfully verify based on the acknowledgement or lack of
@@ -2187,6 +2187,25 @@ Subject Identifiers for Security Event Tokens {{RFC9493}} specification.
2187
2187
The `ssf-configuration` well-known endpoint is registered in IANA's Well-Known URIs
2188
2188
registry, as defined by {{RFC8615}}.
2189
2189
2190
+ IANA is asked to assign the error code "invalid_state", as defined in {{verification-event}}, to the
2191
+ Security Event Token Error Codes section of the Security Event Token registry, as defined
2192
+ in Section 7.1 of {{RFC8935}}. The following information is provided as required by the
2193
+ registration template :
2194
+
2195
+ Error Code
2196
+
2197
+ > invalid_state
2198
+
2199
+ Description
2200
+
2201
+ > Indicates that a Verification event contained a "state" claim that does not
2202
+ match the value expected by the Receiver.
2203
+
2204
+ Change Controller
2205
+
2206
+ > OpenID - Shared Signals Working Group
2207
+
2208
+
2190
2209
--- back
2191
2210
2192
2211
# Acknowledgements
0 commit comments