Skip to content

Commit e84e908

Browse files
PR for Issue #157 (Update CAEP & RISC Events and SSF Docs with txn claim) (#180)
* Update openid-sharedsignals-framework-1_0.md * Update openid-sharedsignals-framework-1_0.md updated to use more normative language and to differentiate between origin events that would cause the issuance of a SETs and callout that `txn` value can be re-used across different SET's * Update openid-sharedsignals-framework-1_0.md Moved verbiage to section 10.2* with minor grammar edits * Update openid-sharedsignals-framework-1_0.md Co-authored-by: Shayne Miel (he/him) <[email protected]> * Update openid-sharedsignals-framework-1_0.md suggested to add myself under the contributor section. Only Change --------- Co-authored-by: Shayne Miel (he/him) <[email protected]>
1 parent 538277f commit e84e908

File tree

1 file changed

+17
-0
lines changed

1 file changed

+17
-0
lines changed

openid-sharedsignals-framework-1_0.md

+17
Original file line numberDiff line numberDiff line change
@@ -67,6 +67,12 @@ contributor:
6767
org: Okta
6868
6969

70+
-
71+
ins: S. O'Dell
72+
name: Sean O'Dell
73+
org: The Walt Disney Company
74+
75+
7076
normative:
7177
CLIENTCRED:
7278
author:
@@ -409,6 +415,7 @@ The following are hypothetical examples of SETs that conform to the Shared Signa
409415
"iss": "https://idp.example.com/",
410416
"jti": "756E69717565206964656E746966696572",
411417
"iat": 1520364019,
418+
"txn": 8675309,
412419
"aud": "636C69656E745F6964",
413420
"sub_id": {
414421
"format": "email",
@@ -426,6 +433,7 @@ The following are hypothetical examples of SETs that conform to the Shared Signa
426433
"iss": "https://idp.example.com/",
427434
"jti": "756E69717565206964656E746966696572",
428435
"iat": 1520364019,
436+
"txn": 8675309,
429437
"aud": "636C69656E745F6964",
430438
"sub_id": {
431439
"format": "complex",
@@ -457,6 +465,7 @@ The following are hypothetical examples of SETs that conform to the Shared Signa
457465
"iss": "https://sp.example2.com/",
458466
"jti": "756E69717565206964656E746966696572",
459467
"iat": 1520364019,
468+
"txn": 8675309,
460469
"aud": "636C69656E745F6964",
461470
"sub_id": {
462471
"format": "email",
@@ -479,6 +488,7 @@ The following are hypothetical examples of SETs that conform to the Shared Signa
479488
"iss": "https://myservice.example3.com/",
480489
"jti": "756E69717565206964656E746966696534",
481490
"iat": 15203800012,
491+
"txn": 8675309,
482492
"aud": "636C69656E745F6324",
483493
"sub_id": {
484494
"format": "catalog_item",
@@ -2045,6 +2055,7 @@ specific to the event type.
20452055
"iss": "https://idp.example.com/",
20462056
"jti": "756E69717565206964656E746966696572",
20472057
"iat": 1520364019,
2058+
"txn": 8675309,
20482059
"aud": "636C69656E745F6964",
20492060
"sub_id": {
20502061
"format": "phone",
@@ -2064,6 +2075,7 @@ specific to the event type.
20642075
"iss": "https://idp.example.com/",
20652076
"jti": "756E69717565206964656E746966696572",
20662077
"iat": 1520364019,
2078+
"txn": 8675309,
20672079
"aud": "636C69656E745F6964",
20682080
"sub_id": {
20692081
"format": "email",
@@ -2131,6 +2143,7 @@ multiple Receivers would lead to unintended data disclosure.
21312143
"iss": "https://transmitter.example.com",
21322144
"aud": ["receiver.example.com/web", "receiver.example.com/mobile"],
21332145
"iat": 1493856000,
2146+
"txn": 8675309,
21342147
"sub_id": {
21352148
"format": "opaque",
21362149
"id": "72e6991badb44e08a69672960053b342"
@@ -2144,6 +2157,9 @@ multiple Receivers would lead to unintended data disclosure.
21442157
~~~
21452158
{: title="Example: SET with array 'aud' claim" #figarrayaud}
21462159

2160+
### The "txn" claim {#txn-claim}
2161+
Transmitters SHOULD set the "txn" claim value in Security Event Tokens (SETs). If the value is present, it MUST be unique to the underlying event that caused the Transmitter to generate the Security Event Token (SET). The Transmitter, however, may use the same value in the "txn" claim across different Security Events Tokens (SETs), such as session revoked and credential change, to indicate that the SETs originated from the same underlying cause or reason.
2162+
21472163
### The "events" claim {#events-claim}
21482164
The "events" claim SHOULD contain only one event. Multiple event type URIs are
21492165
permitted only if they are alternative URIs defining the exact same event type.
@@ -2250,6 +2266,7 @@ The technology described in this specification was made available from contribut
22502266

22512267
-02
22522268

2269+
* added txn claims to non-normative SET examples and generic txn callout under SET Profile section RFC8417(#152)
22532270
* added spec version to metadata
22542271
* Added description as receiver supplied
22552272
* added language to make verification and updated events independent of events_supported

0 commit comments

Comments
 (0)