[ARCHIVE] Future Dated Obligations - Self-signed JWT Client Authentication

Archived 2023.08.11. Content moved to CDS Future Dated Obligations and Dates

Question

The CDS Future dated obligations for July 2022 mentions changes to Self-Signed JWT Client Authentication, which relate to changes to the client authentication and validation of the aud claim that allows a Data Holder (DH) to authenticate the Accredited Data Recipient (ADR) endpoint.

Can the Data Standards Body (DSB) confirm that there are no changes to the Self-Signed JWT Client Authentication mechanism when the Register calls the DH endpoint and that the changes are limited to ADR-hosted endpoints?

Answer

There are no changes to the DH endpoint. The future-dated obligations mentioned affect only the ADR-hosted endpoints.