Skip to content

Commit

Permalink
Incorporate Kristina's suggestion #397 (comment)
Browse files Browse the repository at this point in the history
  • Loading branch information
bc-pi committed Dec 22, 2023
1 parent a474e2b commit 4442c3a
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion draft-ietf-oauth-selective-disclosure-jwt.md
Original file line number Diff line number Diff line change
Expand Up @@ -767,7 +767,7 @@ To this end, Verifiers MUST follow the following steps (or equivalent):
6. Check that the creation time of the Key Binding JWT, as determined by the `iat` claim, is within an acceptable window.
7. Determine that the Key Binding JWT is bound to the current transaction and was created for this Verifier (replay protection) by validating `nonce` and `aud` claims.
8. Calculate the digest over the Issuer-signed JWT and Disclosures as defined in (#integrity-protection-of-the-presentation) and verify that it matches the value of the `sd_hash` claim in the Key Binding JWT.
9. Check that the Key Binding JWT is valid in all other respects, per [@!RFC7519] and [@!RFC8725].
9. Check that the Key Binding JWT is a valid JWT in all other respects, per [@!RFC7519] and [@!RFC8725].

If any step fails, the Presentation is not valid and processing MUST be aborted.

Expand Down

0 comments on commit 4442c3a

Please sign in to comment.