You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
docs: Update DPoP references to bound_key in OIDC documentation (#102)
- Replaced instances of `dpop` with `bound_key` in scopes, request, and token documentation to reflect the new terminology.
- Clarified the implications of using `bound_key` for ID tokens and related claims.
- Enhanced user understanding of the changes in scope usage and its impact on authentication requests.
Note: The following example includes the `cnf` claim that appears when the `dpop` scope is requested:
30
+
Note: The following example includes the `cnf` claim that appears when the `bound_key` scope is requested:
31
31
32
32
```json
33
33
{
@@ -103,4 +103,4 @@ Note: The following example includes the `cnf` claim that appears when the `dpop
103
103
|`iat`|The time the ID Token was issued in [Epoch time](https://en.wikipedia.org/wiki/Unix_time)|
104
104
|`exp`|The time the ID Token expires.<br/>Hellō sets the expiry to be 5 minutes (300 seconds) after `iat`|
105
105
|`tenant`|The Hellō identifier for the organization. Similar to `sub`, use this to identify the organization. Set to `personal` for personal accounts.|
106
-
|`cnf` <ExperimentalTooltip />|Confirmation claim containing the public key bound to the ID token when using `dpop` scope.|
106
+
|`cnf` <ExperimentalTooltip />|Confirmation claim containing the public key bound to the ID token when using `bound_key` scope.|
Copy file name to clipboardExpand all lines: pages/docs/scopes.mdx
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -37,7 +37,7 @@ Following are the scopes currently supported by Hellō. At the top are the stand
37
37
|`picture`|A URL to a profile picture. [See FAQ 13](/faqs/#13-what-can-i-do-with-the-picture-url-i-receive) for details|
38
38
|`profile`|equivalent to `name`, `email`, and `picture`|
39
39
|**Experimental**|**The following scopes are currently experimental**|
40
-
|`dpop` <ExperimentalTooltip/>|Enables key binding for ID tokens using RFC 9449 DPoP.|
40
+
|`bound_key` <ExperimentalTooltip/>|Enables key binding for ID tokens using RFC 9449 DPoP.|
41
41
42
42
*NOTE: We previously returned `phone` and `phone_verified` claims and now return `phone_number` and `phone_number_verified` claims per [OIDC Standard Claims](https://openid.net/specs/openid-connect-core-1_0.html#StandardClaims)*
0 commit comments