oauth2.dev

use

IESG

Registry Context

The JWK `use` parameter identifies the intended use of a public key, such as signature verification or encryption. Its value is a case-sensitive string. RFC 7517 defines `sig` and `enc`, permits other values, and makes the member optional unless an application requires it.

Technical Summary

RFC 7517 Section 4.2 defines `use` as a case-sensitive string identifying a public key's intended use. The defined values are `sig` for signatures and `enc` for encryption. Other values may be used. The member is optional unless required by the application.

When Used

Use this entry when generating, validating, or interpreting the JWK `use` member for a public key.

Normative Requirements

Unspecified actor

MAY
1
  1. RFC 7517 - Section 4.2

    Use `use` values other than `sig` and `enc`..

    Other values MAY be used.

OPTIONAL
1
  1. RFC 7517 - Section 4.2

    Include the `use` member in a JWK..

    Condition: Unless the application requires its presence.

    Use of the "use" member is OPTIONAL, unless the application requires its presence.

Validation Guidance

error

If present, verify that `use` is a case-sensitive string.

warning

Allow `use` to be absent unless the application requires its presence.

info

Recognize `sig` and `enc` as the values defined by RFC 7517.

info

Permit values other than `sig` and `enc`.

Reference

Details

Entry Id
use
Parameter Name
use
Parameter Description
Public Key Use
Used With Kty Value
*
Parameter Information Class
Public
Change Controller
IESG
Reference
RFC7517 - Section 4.2