Hello,
We are currently working on a draft for Transaction Tokens
<https://datatracker.ietf.org/doc/draft-ietf-oauth-transaction-tokens/>,
which envisions a new HTTP Request Header called "Txn-Token"
<https://www.ietf.org/archive/id/draft-ietf-oauth-transaction-tokens-05.html#name-txn-token-http-header>.
The header value is expected to be a JWT.
We were debating (see comments here
<https://github.com/oauth-wg/oauth-transaction-tokens/pull/176> and the
attached screenshot) which HTTP Structured Header Type
<https://www.rfc-editor.org/rfc/rfc8941.html> would be appropriate for such
a value. We do not want to enclose the value in quotes, so the STRING type
cannot be used. The JWTs also might be a bit long (> 1024 bytes).
What is this group's guidance for proposals that want to add HTTP Headers
that have JWT as their values?
Thanks,
Atul
--
Atul Tulshibagwale
CTO
<https://www.linkedin.com/in/tulshi/> <atul@sgnl.ai>
[image: image.png]
