| Table of Contents | ||||
|---|---|---|---|---|
|
The private_key_jwt authentication is based on asymmetric key, the private part is generated and only known by the client whereas the public part is communicated and registered in the authorization server for the specific client.
...
ES256 signing algorithm + above attributes + signature of them must be served in JWT format (rfc7519), see below:
JWT client assertion header
|
JWT client assertion payload
|
JWT client assertion signature
|
All parts are encoded and separated by '.' to make up the JWT as follows
private_key_jwt assertion
|
...