oauth2.dev

dest

IESG

Registry Context

`dest` is a destination Identity String claim.

Technical Summary

PASSporT: Personal Assertion Token Section 5.2.1 defines `dest` for JWT claim sets with the registry description: Destination Identity String.

When Used

Used in JWTs that follow PASSporT: Personal Assertion Token Section 5.2.1.

Normative Requirements

`dest` claim

MUST
1
  1. 8225 - Section 5.2.1

    have at least one identity claim object..

    Condition: When included in a PASSporT object.

    The "dest" claim is a JSON object with the claim name of "dest" and MUST have at least one identity claim object.

Validation Guidance

error

When processing `dest`, apply the syntax and semantics from PASSporT: Personal Assertion Token Section 5.2.1.

info

Treat `dest` as profile-specific unless the JWT explicitly follows the referenced specification.

Reference

Details

Entry Id
dest
Claim Name
dest
Claim Description
Destination Identity String
Change Controller
IESG
Reference
RFC8225 - Section 5.2.1