JOSE header claim

Question

Is the Javascript Object Signing and Encryption (JOSE) "alg" a mandatory claim? In the UK specification, for FAPI R/W it is mandatory.

Answer

The Consumer Data Standards defer to the FAPI upstream standards, so it is mandatory where required in the FAPI specs.