Skip to content

Commit 1837ae0

Browse files
authored
docs: Update DPoP references to bound_key in OIDC documentation (#102)
- Replaced instances of `dpop` with `bound_key` in scopes, request, and token documentation to reflect the new terminology. - Clarified the implications of using `bound_key` for ID tokens and related claims. - Enhanced user understanding of the changes in scope usage and its impact on authentication requests.
1 parent d9f188f commit 1837ae0

3 files changed

Lines changed: 4 additions & 4 deletions

File tree

pages/docs/oidc/request.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ The **request URL** is `https://wallet.hello.coop/authorize` and a query with th
3232
|`prompt`<br/>*optional*|A space delimited list. Accepted values include:|
3333
| | - `login` will require the user to re-authenticate at their login provider|
3434
| | - `consent` will require the user to review, and potentially change, released claims|
35-
|`dpop_jkt` <ExperimentalTooltip />|JWK Thumbprint of the DPoP public key using SHA-256. Required when using `dpop` scope.|
35+
|`dpop_jkt` <ExperimentalTooltip />|JWK Thumbprint of the DPoP public key using SHA-256. Required when using `bound_key` scope.|
3636

3737
### Hellō Parameters
3838

pages/docs/oidc/token.mdx

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ iUwBbgx0XoFeIn4jQtMNydaksmbPqZFtAFNUKUM85KFnKAx_OMrhqEU0b3lc4kbR1Na_orr4Ucm1e-_p
2727

2828
### Decoded ID Token
2929

30-
Note: The following example includes the `cnf` claim that appears when the `dpop` scope is requested:
30+
Note: The following example includes the `cnf` claim that appears when the `bound_key` scope is requested:
3131

3232
```json
3333
{
@@ -103,4 +103,4 @@ Note: The following example includes the `cnf` claim that appears when the `dpop
103103
|`iat`|The time the ID Token was issued in [Epoch time](https://en.wikipedia.org/wiki/Unix_time)|
104104
|`exp`|The time the ID Token expires.<br/>Hellō sets the expiry to be 5 minutes (300 seconds) after `iat`|
105105
|`tenant`|The Hellō identifier for the organization. Similar to `sub`, use this to identify the organization. Set to `personal` for personal accounts.|
106-
|`cnf` <ExperimentalTooltip />|Confirmation claim containing the public key bound to the ID token when using `dpop` scope.|
106+
|`cnf` <ExperimentalTooltip />|Confirmation claim containing the public key bound to the ID token when using `bound_key` scope.|

pages/docs/scopes.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ Following are the scopes currently supported by Hellō. At the top are the stand
3737
|`picture`|A URL to a profile picture. [See FAQ 13](/faqs/#13-what-can-i-do-with-the-picture-url-i-receive) for details|
3838
|`profile`|equivalent to `name`, `email`, and `picture`|
3939
|**Experimental**|**The following scopes are currently experimental**|
40-
|`dpop` <ExperimentalTooltip/>|Enables key binding for ID tokens using RFC 9449 DPoP.|
40+
|`bound_key` <ExperimentalTooltip/>|Enables key binding for ID tokens using RFC 9449 DPoP.|
4141

4242
*NOTE: We previously returned `phone` and `phone_verified` claims and now return `phone_number` and `phone_number_verified` claims per [OIDC Standard Claims](https://openid.net/specs/openid-connect-core-1_0.html#StandardClaims)*
4343

0 commit comments

Comments
 (0)