Skip to content

Clarify "request_context" #247

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 4 commits into from
Oct 30, 2025
+3 −2
Merged

Clarify "request_context" #247

Changes from 1 commit
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
b031088
Clarify "request_context"
PieterKas Sep 8, 2025
e31c559
Update draft-ietf-oauth-transaction-tokens.md
PieterKas Sep 17, 2025
25277f3
Update draft-ietf-oauth-transaction-tokens.md
PieterKas Oct 1, 2025
e3a5e73
Update draft-ietf-oauth-transaction-tokens.md
PieterKas Oct 1, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion draft-ietf-oauth-transaction-tokens.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -462,7 +462,7 @@ To request a Txn-Token the workload invokes the OAuth 2.0 {{RFC6749}} token endp

The following additional parameters MAY be present in a Txn-Token Request:

* `request_context` OPTIONAL. This parameter contains a base64url encoded JSON object which represents the context of this transaction. The parameter SHOULD be present and how the Transaction Token Service uses this parameter is out of scope for this specification.
* `request_context` OPTIONAL. This parameter contains a base64url encoded JSON object which represents the context of this transaction. Use of this parameter is RECOMMENDED.
* `request_details` OPTIONAL. This parameter contains a base64url encoded JSON object which represents additional details of the transaction that MUST remain immutable throughout the processing of the transaction by multiple workloads. The Transaction Token Service uses this information to construct the `tctx` claim.

The requesting workload MUST authenticate its identity to the Transaction Token Service. The exact client authentication mechanism used is outside the scope of this specification.
Expand Down