7. IANA 考虑事项
7.1. 媒体类型注册
7.1.1. 注册表内容
本节按照 [RFC6838] 中描述的方式, 在 "Media Types" 注册表 [IANA.MediaTypes] 中注册新的媒体类型 "application/at+jwt" [RFC2046]. 它可用于指示内容是以 JWT 格式编码的访问令牌.
该媒体类型帮助资源服务器和中间组件识别 JWT access token 与其他 JWT 对象的区别. 注册字段中的英文名称、参数值和联系人信息是 IANA 注册记录的一部分, 因此保持原文.
Type name: Application
Subtype name: at+jwt
Required parameters: N/A
Optional parameters: N/A
Encoding considerations: Binary; JWT values are encoded as a series of base64url-encoded values (with trailing '=' characters removed), some of which may be the empty string, separated by period ('.') characters.
安全考虑事项: 见 RFC 9068 的安全考虑事项一节.
Interoperability considerations: N/A
Published specification: RFC 9068
Applications that use this media type: Applications that access resource servers using OAuth 2.0 access tokens encoded in JWT format
Fragment identifier considerations: N/A
Additional information:
- Magic number(s): N/A
- File extension(s): N/A
- Macintosh file type code(s): N/A
Person & email address to contact for further information: Vittorio Bertocci <[email protected]>
Intended usage: COMMON
Restrictions on usage: None
Author: Vittorio Bertocci <[email protected]>
Change controller: IETF
Provisional registration?: No
7.2. Claims 注册
本规范第 2.2.3.1 节引用 [RFC7643] 中定义的属性 "roles", "groups", "entitlements", 用于在 JWT 访问令牌中表达授权信息. 本节将这些属性作为 claim 注册到 [RFC7519] 引入的 "JSON Web Token (JWT)" IANA 注册表中.
这些 claim 允许授权服务器以标准化方式表达角色、组成员关系和授权权益. 注册到 JWT claim 名称空间后, 不同实现可以在不私自约定字段名的情况下交换这些授权属性.
7.2.1. 注册表内容
7.2.1.1. Roles
Claim Name: roles
Claim Description: Roles
Change Controller: IETF
Specification Document(s): Section 4.1.2 of [RFC7643] and Section 2.2.3.1 of RFC 9068
7.2.1.2. Groups
Claim Name: groups
Claim Description: Groups
Change Controller: IETF
Specification Document(s): Section 4.1.2 of [RFC7643] and Section 2.2.3.1 of RFC 9068
7.2.1.3. Entitlements
Claim Name: entitlements
Claim Description: Entitlements
Change Controller: IETF
Specification Document(s): Section 4.1.2 of [RFC7643] and Section 2.2.3.1 of RFC 9068