Skip to content

Commit 4ee7598

Browse files
committed
Apply feedback on trust_marks validation steps
1 parent 248f679 commit 4ee7598

File tree

1 file changed

+9
-5
lines changed

1 file changed

+9
-5
lines changed

openid-federation-1_0.xml

Lines changed: 9 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -893,14 +893,18 @@
893893
<t>
894894
If the <spanx style="verb">trust_marks</spanx> Claim is present,
895895
the Entity Statement MUST be an Entity Configuration.
896-
For each element of the array that is the Claim value,
897-
validate that the
898-
<spanx style="verb">trust_mark_type</spanx> member value matches the
896+
Validate that the syntax of this Claim Value conforms to the
897+
Claim definition.
898+
In particular, for each element of the array that is the Claim value,
899+
validate that there is a <spanx style="verb">trust_mark_type</spanx>
900+
member whose value matches the
899901
<spanx style="verb">trust_mark_type</spanx> Claim value in the
900902
Trust Mark JWT that is the value of the
901903
<spanx style="verb">trust_mark</spanx> member.
902-
Validate each Trust Mark as described in
903-
<xref target="trust-mark-validation"/>.
904+
Validating the syntax is separate from evaluating whether particular
905+
Trust Marks are issued by a trusted party and are trusted;
906+
that process is described in <xref target="trust-mark-validation"/>
907+
and MAY be performed as a separate step from syntactic validation.
904908
</t>
905909
<t>
906910
If the <spanx style="verb">trust_mark_issuers</spanx> Claim is present,

0 commit comments

Comments
 (0)