Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Terribly complex ABNF for WPT #83

Open
wants to merge 2 commits into
base: main
Choose a base branch
from
Open

Terribly complex ABNF for WPT #83

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
22c4ccb
Terribly complex ABNF for WPT
Dec 19, 2024
ba28b19
Oops
Dec 19, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 11 additions & 1 deletion draft-ietf-wimse-s2s-protocol.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -282,7 +282,8 @@ For those who celebrate, ABNF {{RFC5234}} for the value of `Workload-Identity-To
ALPHA = %x41-5A / %x61-7A ; A-Z / a-z
DIGIT = %x30-39 ; 0-9
base64url = 1*(ALPHA / DIGIT / "-" / "_")
WIT = base64url "." base64url "." base64url
JWT = base64url "." base64url "." base64url
WIT = JWT
~~~~
{: #wit-header-abnf title="Workload-Identity-Token Header Field ABNF"}

Expand Down Expand Up @@ -310,6 +311,15 @@ This option, inspired by the OAuth DPoP specification {{?RFC9449}}, uses a DPoP-
the calling workload in the context of the request. The WIMSE Identity Token ({{to-wit}}) is sent in the request as
described in {{wit-http-header}}. An additional JWT, the Workload Proof Token (WPT), is signed by the private key
corresponding to the public key in the WIT. The WPT is sent in the `Workload-Proof-Token` header field of the request.
The ABNF syntax of the `Workload-Proof-Token` header field is:

~~~ abnf
WPT = JWT
~~~~
{: #wpt-header-abnf title="Workload-Proof-Token Header Field ABNF"}

where the `JWT` projection is defined in {{wit-header-abnf}}.

A WPT contains the following:

* in the JOSE header:
Expand Down
Loading