Internet-Draft IETF URN Sub-Namespace for JWT Claims March 2025
Charabaruk Expires 4 September 2025 [Page]
Workgroup:
Internet Engineering Task Force
Internet-Draft:
draft-charabaruk-ietf-urn-jwt-claims-00
Published:
Intended Status:
Informational
Expires:
Author:
C.S. Charabaruk
Ontario Nurses' Association

An IETF URN Sub-Namespace for JSON Web Token Claims

Abstract

This document establishes an IETF URN Sub-namespace for use with JSON Web Token claims.

Status of This Memo

This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79.

Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet-Drafts is at https://datatracker.ietf.org/drafts/current/.

Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress."

This Internet-Draft will expire on 4 September 2025.

Table of Contents

1. Introduction

Various systems related to authentication and identity use URIs to identify values and value types. This document creates and registers an IETF URN Sub-namespace, as documented in [RFC3553], to map claims specified in the JSON Web Token Claims registry to URIs.

2. IANA Considerations

2.1. Sub-Namespace Registration of urn:ietf:params:jwt-claims

Per [RFC3553], this document registers a new URN Sub-namespace, urn:ietf:params:jwt-claims.

  • Registry name: jwt-claims
  • Specification: [this document]
  • Repository: The [IANA.JWT.Claims] registry as established by Section 10.1 of [RFC7519]
  • Index value: values subordinate to urn:ietf:params:jwt-claims are of the form urn:ietf:params:jwt-claims:<value> with <value> as the index value. The index value is determined from the "Claim Name" property of registrations in the "JSON Web Token Claims" registry.

3. Security Considerations

There are no additional security considerations beyond those already inherent to URNs or JSON Web Tokens. Security considerations for URNs in general can be found in [RFC8141]. Security considerations for JWTs in general can be found in [RFC7519].

4. References

4.1. Normative References

[RFC3553]
Mealling, M., Masinter, L., Hardie, T., and G. Klyne, "An IETF URN Sub-namespace for Registered Protocol Parameters", BCP 73, RFC 3553, DOI 10.17487/RFC3553, , <https://www.rfc-editor.org/info/rfc3553>.
[RFC7519]
Jones, M., Bradley, J., and N. Sakimura, "JSON Web Token (JWT)", RFC 7519, DOI 10.17487/RFC7519, , <https://www.rfc-editor.org/info/rfc7519>.
[RFC8141]
Saint-Andre, P. and J. Klensin, "Uniform Resource Names (URNs)", RFC 8141, DOI 10.17487/RFC8141, , <https://www.rfc-editor.org/info/rfc8141>.
[IANA.JWT.Claims]
"JSON Web Token Claims", <https://www.iana.org/assignments/jwt/jwt.xhtml#claims>.

4.2. Informative References

Author's Address

Chris Charabaruk
Ontario Nurses' Association