Search RFCs

RFC Editor

File formats:

Status:

PROPOSED STANDARD

Authors:

M. Jones
E. Wahlstroem
S. Erdtman
H. Tschofenig

Stream:

IETF

Source:

ace (sec)

Cite this RFC:TXT  | XML  |  BibTeX

DOI:  https://doi.org/10.17487/RFC8392

Discuss this RFC: Send questions or comments to the mailing listace@ietf.org

Other actions:View Errata  | Submit Errata  | Find IPR Disclosures from the IETF  | View History of RFC 8392

Abstract

CBOR Web Token (CWT) is a compact means of representing claims to betransferred between two parties. The claims in a CWT are encoded inthe Concise Binary Object Representation (CBOR), and CBOR ObjectSigning and Encryption (COSE) is used for added application-layersecurity protection. A claim is a piece of information assertedabout a subject and is represented as a name/value pair consisting ofa claim name and a claim value. CWT is derived from JSON Web Token(JWT) but uses CBOR rather than JSON.

For the definition ofStatus,seeRFC 2026.

For the definition ofStream, seeRFC 8729.