Subject: [OAUTH-WG] JSON Web Token (JWT) Specification Draft -08

From: Mike Jones <[email-masked]>
Date: Tue, 13 Mar 2012 01:07:20 +0000

Draft 08 of the JSON Web Token (JWT) specification<http://tools.ietf.org/html/draft-jones-json-web-token-08> has been published.  It uses the -01 versions of the JOSE specifications<http://self-issued.info/?p=688> and also contains these changes:

*         Removed language that required that a JWT must have three parts.  Now the number of parts is explicitly dependent upon the representation of the underlying JWS or JWE.

*         Moved the "alg":"none" definition to the JWS spec.

*         Registered the application/jwt MIME Media Type.

*         Clarified that the order of the creation and validation steps is not significant in cases where there are no dependencies between the inputs and outputs of the steps.

*         Corrected the Magic Signatures and Simple Web Token (SWT) references.
This specification is available at:

*         http://tools.ietf.org/html/draft-jones-json-web-token-08
An HTML formatted version is available at:

*         http://self-issued.info/docs/draft-jones-json-web-token-08.html

                                                                -- Mike