oauth2.dev

introspection_signing_alg_values_supported

IETF

Registry Context

This optional OAuth authorization server metadata parameter advertises the JWS signing algorithms supported by the introspection endpoint for signing introspection responses. RFC 9701 recommends publishing the supported signing and encryption algorithms for JWT introspection responses using OAuth 2.0 Authorization Server Metadata.

Technical Summary

When present, introspection_signing_alg_values_supported is a JSON array of JWS alg values defined by JWA and supported by the introspection endpoint for signing introspection responses.

When Used

Resource servers use the published algorithm information to parameterize their client registration requests.

Normative Requirements

Authorization servers

SHOULD
1

  1. RFC 9701 - Section 7

    publish the supported algorithms for signing and encrypting the JWT of an introspection response using OAuth 2.0 Authorization Server Metadata parameters.

    Authorization servers SHOULD publish the supported algorithms for signing and encrypting the JWT of an introspection response

Unspecified actor

OPTIONAL
1

  1. RFC 9701 - Section 7

    include introspection_signing_alg_values_supported as a JSON array of JWS signing algorithm alg values defined by JWA and supported by the introspection endpoint for signing the response.

    OPTIONAL. JSON array containing a list of the JWS signing algorithms (alg values), as defined in JWA, supported by the introspection endpoint to sign the response.

Validation Guidance

error

If introspection_signing_alg_values_supported is present, verify that its value is a JSON array.

error

Verify that each array element is a JWS alg value defined by JWA and represents an algorithm supported by the introspection endpoint for signing responses.

info

Absence of introspection_signing_alg_values_supported is permitted because the parameter is OPTIONAL.

warning

Warn when supported algorithms for signing and encrypting JWT introspection responses are not published through OAuth 2.0 Authorization Server Metadata.

Reference

RFC9701 - Section 7

Details

Entry Id
introspection_signing_alg_values_supported
Metadata Name
introspection_signing_alg_values_supported
Metadata Description
JSON array containing a list of algorithms supported by the authorization server for introspection response signing
Change Controller
IETF
Reference
RFC9701 - Section 7