oauth-wg/oauth-transaction-tokens

tid claim is required (section 5.2.2), but what about calls that aren't app specific

Closed this issue · 2 comments

tulshi commented

From Dr. Kelley W Burgin

gffletch commented

Kelly, can you clarify? The 'tid' claim; now 'txn' is just an identifier for the transaction.

tulshi commented

Clarify this in the draft.