Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Document access token format (is a JWT itself) #65

Open
kwin opened this issue Jul 29, 2020 · 0 comments
Open

Document access token format (is a JWT itself) #65

kwin opened this issue Jul 29, 2020 · 0 comments

Comments

@kwin
Copy link

kwin commented Jul 29, 2020

It seems that the access token being issued by https://www.adobe.io/authentication/auth-methods.html#!AdobeDocs/adobeio-auth/master/JWT/JWT.md#exchanging-jwt-to-retrieve-an-access-token is a JWT itself but it doesn't seem to follow https://tools.ietf.org/html/draft-ietf-oauth-access-token-jwt-07#section-2.

By looking at the AEM client (com.adobe.granite.auth.ims.impl.IMSTokenValidatorImpl) I assume that at least the following claims are contained in there

  1. created_at
  2. expires_in

Please document the format of the access token so that it can be validated without having to consider the other properties from the OAuth response (https://tools.ietf.org/html/rfc6749#section-4.1.4).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant