@@ -414,12 +414,7 @@ The following are hypothetical examples of SETs that conform to the Shared Signa
414
414
415
415
},
416
416
" events " : {
417
- " https://schemas.openid.net/secevent/risc/event-type/account-enabled " : {
418
- " subject " : {
419
- " format " : " email" ,
420
-
421
- }
422
- }
417
+ " https://schemas.openid.net/secevent/risc/event-type/account-enabled " : {}
423
418
}
424
419
}
425
420
~~~
@@ -446,19 +441,6 @@ The following are hypothetical examples of SETs that conform to the Shared Signa
446
441
},
447
442
" events " : {
448
443
" https://schemas.openid.net/secevent/caep/event-type/session-revoked " : {
449
- " subject " : {
450
- " format " : " complex" ,
451
- " user " : {
452
- " format " : " iss_sub" ,
453
- " iss " : " https://idp.example.com/3957ea72-1b66-44d6-a044-d805712b9288/" ,
454
-
455
- },
456
- " device " : {
457
- " format " : " iss_sub" ,
458
- " iss " : " https://idp.example.com/3957ea72-1b66-44d6-a044-d805712b9288/" ,
459
- " sub " : " e9297990-14d2-42ec-a4a9-4036db86509a"
460
- }
461
- },
462
444
" initiating_entity " : " policy" ,
463
445
" reason_admin " : " Policy Violation: C076E82F" ,
464
446
" reason_user " : " Landspeed violation." ,
@@ -481,10 +463,6 @@ The following are hypothetical examples of SETs that conform to the Shared Signa
481
463
},
482
464
" events " : {
483
465
" https://schemas.openid.net/secevent/caep/event-type/token-claims-change " : {
484
- " subject " : {
485
- " format " : " email" ,
486
-
487
- },
488
466
" event_timestamp " : 1600975810,
489
467
" claims " : {
490
468
" role " : " ro-admin"
@@ -507,10 +485,6 @@ The following are hypothetical examples of SETs that conform to the Shared Signa
507
485
},
508
486
" events " : {
509
487
" https://schemas.openid.net/secevent/caep/event-type/token-claims-change " : {
510
- " subject " : {
511
- " format " : " catalog_item" ,
512
- " catalog_id " : " c0384/winter/2354122"
513
- },
514
488
" event_timestamp " : 1600975810,
515
489
" claims " : {
516
490
" role " : " ro-admin"
@@ -2082,10 +2056,6 @@ specific to the event type.
2082
2056
},
2083
2057
" events " : {
2084
2058
" https://schemas.openid.net/secevent/risc/event-type/account-disabled " : {
2085
- " subject " : {
2086
- " format " : " phone" ,
2087
- " phone_number " : " +1 206 555 0123"
2088
- },
2089
2059
" reason " : " hijacking" ,
2090
2060
" cause-time " : 1508012752
2091
2061
}
@@ -2106,11 +2076,9 @@ specific to the event type.
2106
2076
},
2107
2077
" events " : {
2108
2078
" https://schemas.openid.net/secevent/caep/event-type/token-claims-changed " : {
2109
- " subject " : {
2110
- " format " : " email" ,
2111
-
2112
- },
2113
- " token " : " some-token-value"
2079
+ " claims " : {
2080
+ " token " : " some-token-value"
2081
+ }
2114
2082
}
2115
2083
}
2116
2084
}
@@ -2162,6 +2130,10 @@ multiple Receivers would lead to unintended data disclosure.
2162
2130
" iss " : " https://transmitter.example.com" ,
2163
2131
" aud " : ["receiver.example.com/web", "receiver.example.com/mobile"],
2164
2132
" iat " : 1493856000,
2133
+ " sub_id " : {
2134
+ " format " : " opaque" ,
2135
+ " id " : " 72e6991badb44e08a69672960053b342"
2136
+ },
2165
2137
" events " : {
2166
2138
" https://schemas.openid.net/secevent/ssf/event-type/verification " : {
2167
2139
" state " : " VGhpcyBpcyBhbiBleGFtcGxlIHN0YXRlIHZhbHVlLgo="
0 commit comments