oauth-wg/oauth-transaction-tokens

Txt token Header

Closed this issue · 5 comments

I assume the token is sent in the header. Do we have any recommendations for the header name?

In what situations would we have multiple tokens such that leveraging the Authorization header is not sufficient? My preference would be to leverage the Authorization header. Receiving entities can distinguish token types based on the JWT Header.

@gffletch It is mainly in the transition phase. In our case, we want to pass both Access Token and Transaction Token until all the downstream are ready.

This topic has come up again so re-opening the issue as it's something I think we need to address in the specification.

Duplicate of #49

I believe, this issue can be closed as well?