request_
Registry Context
Lists the JWE content-encryption algorithms an authorization server supports for encrypted Request Objects.
Technical Summary
An authorization server metadata member containing supported JWE "enc" values for Request Objects. RFC 9101 identifies it as authorization server metadata corresponding to the client metadata member request_object_encryption_enc.
When Used
Used when a client selects a mutually supported content-encryption algorithm for an encrypted Request Object.
Normative Requirements
Authorization servers
RFC 8414 - Section 3.2
omit this metadata member when its array would contain zero elements.
Condition: when no supported values would be listed
Claims with zero elements MUST be omitted from the response.
RFC 8414 - Section 3.2
return this metadata member as an additional claim in its authorization server metadata response.
Other claims MAY also be returned.
Validation Guidance
If present, verify that the member is a JSON array of JWE content-encryption algorithm identifiers.
Reject an empty array; the authorization server must omit the member when it has no values to advertise.
Treat the member as optional unless an applicable profile requires its publication.
Reference
Details
- Entry Id
request_object_ encryption_ enc_ values_ supported - Metadata Name
request_object_ encryption_ enc_ values_ supported - Metadata Description
JSON array containing a list of the JWE "enc" values supported by the OP for Request Objects- Change Controller
OpenID_Foundation_ Artifact_ Binding_ WG - Reference
OpenID Connect Discovery 1.0 - Section 3