This fragment is not visible to the reader
| Type | Reference | Content |
|---|---|---|
| web | github.com | SMART Permission Tickets, published by . This guide is not an authorized publication; it is the continuous build for version 0.1.0 built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/jmandel/smart-permission-tickets-wip/ and changes regularly. See the Directory of published versions |
| web | openid.net | OpenID Federation 1.0 |
| web | www.udap.org | UDAP |
| web | www.rfc-editor.org |
A Permission Ticket MAY bind redemption to a specific client key using the cnf
(Confirmation, RFC 7800
) claim:
|
| web | www.rfc-editor.org |
cnf.jkt
: JWK Thumbprint ( RFC 7638
) of the authorized client's public key
|
| web | www.rfc-editor.org |
Binding:
When present, PermissionTicket.cnf.jkt
binds redemption to a specific client key via its JWK Thumbprint ( RFC 7638
). Data Holders compute the thumbprint of the client_assertion
signing key and verify it matches. When cnf
is absent, aud
+ client authentication provide the trust boundary.
|
tree-filter.png
|