<?xml version='1.0' encoding='utf-8'?>
<!DOCTYPE rfc [
  <!ENTITY nbsp    "&#160;">
  <!ENTITY zwsp   "&#8203;">
  <!ENTITY nbhy   "&#8209;">
  <!ENTITY wj     "&#8288;">
]>
<?xml-stylesheet type="text/xsl" href="rfc2629.xslt" ?>
<!-- generated by https://github.com/cabo/kramdown-rfc version 1.7.29 (Ruby 3.4.4) -->
<rfc xmlns:xi="http://www.w3.org/2001/XInclude" ipr="trust200902" docName="draft-ietf-spice-oidc-cwt-01" category="info" consensus="true" submissionType="IETF" tocInclude="true" sortRefs="true" symRefs="true" version="3">
  <!-- xml2rfc v2v3 conversion 3.29.0 -->
  <front>
    <title abbrev="OpenID Connect Standard Claims for CWT">OpenID Connect Standard Claims Registration for CBOR Web Tokens</title>
    <seriesInfo name="Internet-Draft" value="draft-ietf-spice-oidc-cwt-01"/>
    <author fullname="Beltram Maldant">
      <organization>SimpleLogin</organization>
      <address>
        <email>beltram.ietf@pm.me</email>
      </address>
    </author>
    <author initials="M. B." surname="Jones" fullname="Michael B. Jones">
      <organization>Self-Issued Consulting</organization>
      <address>
        <postal>
          <country>United States</country>
        </postal>
        <email>michael_b_jones@hotmail.com</email>
        <uri>https://self-issued.info/</uri>
      </address>
    </author>
    <date year="2025" month="June" day="27"/>
    <area>Security</area>
    <workgroup>Secure Patterns for Internet CrEdentials</workgroup>
    <keyword>Openid Connect</keyword>
    <keyword>Standard Claims</keyword>
    <abstract>
      <?line 59?>

<t>This document registers OpenID Connect standard claims already used in JSON Web Tokens for use in CBOR Web Tokens.</t>
    </abstract>
    <note removeInRFC="true">
      <name>About This Document</name>
      <t>
        The latest revision of this draft can be found at <eref target="https://ietf-wg-spice.github.io/draft-ietf-spice-oidc-cwt/#go.draft-ietf-spice-oidc-cwt.html"/>.
        Status information for this document may be found at <eref target="https://datatracker.ietf.org/doc/draft-ietf-spice-oidc-cwt/"/>.
      </t>
      <t>
        Discussion of this document takes place on the
        Secure Patterns for Internet CrEdentials Working Group mailing list (<eref target="mailto:spice@ietf.org"/>),
        which is archived at <eref target="https://mailarchive.ietf.org/arch/browse/spice/"/>.
        Subscribe at <eref target="https://www.ietf.org/mailman/listinfo/spice/"/>.
      </t>
      <t>Source for this draft and an issue tracker can be found at
        <eref target="https://github.com/ietf-wg-spice/draft-ietf-spice-oidc-cwt"/>.</t>
    </note>
  </front>
  <middle>
    <?line 64?>

<section anchor="introduction">
      <name>Introduction</name>
      <t>OpenID Connect <xref target="OpenID.Core"/> is an authentication standard including standard claims already in use for JSON Web Tokens (JWT) <xref target="RFC7519"/>. CBOR Web Tokens (CWT) <xref target="RFC8392"/> have a claims registry, but do not include most of these claims. This draft aims at unifying use of OpenID Connect claims in JWTs and CWTs.</t>
    </section>
    <section anchor="conventions-and-definitions">
      <name>Conventions and Definitions</name>
      <t>The key words "<bcp14>MUST</bcp14>", "<bcp14>MUST NOT</bcp14>", "<bcp14>REQUIRED</bcp14>", "<bcp14>SHALL</bcp14>", "<bcp14>SHALL
NOT</bcp14>", "<bcp14>SHOULD</bcp14>", "<bcp14>SHOULD NOT</bcp14>", "<bcp14>RECOMMENDED</bcp14>", "<bcp14>NOT RECOMMENDED</bcp14>",
"<bcp14>MAY</bcp14>", and "<bcp14>OPTIONAL</bcp14>" in this document are to be interpreted as
described in BCP 14 <xref target="RFC2119"/> <xref target="RFC8174"/> when, and only when, they
appear in all capitals, as shown here.</t>
      <?line -18?>

</section>
    <section anchor="address-claim">
      <name>Address Claim</name>
      <t>To further reduce the size of this prevalent and large claim, we register integer labels for it.
We strictly map the definition of claims in Section 5.1.1 of <xref target="OpenID.Core"/>: all the claims are optional and "formatted" can either be used instead or in addition of all the other fields.</t>
    </section>
    <section anchor="security-considerations">
      <name>Security Considerations</name>
      <t>This document registers existing OpenID Connect standard claims already used in JSON Web Tokens <xref target="RFC7519"/> for use in CBOR Web Tokens <xref target="RFC8392"/> without changing their semantics. The Security and Privacy Considerations respectively of Sections 16 and 17 of <xref target="OpenID.Core"/> also apply.</t>
    </section>
    <section anchor="iana-considerations">
      <name>IANA Considerations</name>
      <t>All claims defined in this document are placed in the (CBOR Web Token (CWT) Claims) <xref target="IANA.CWT.Claims"/> Registry (part of the eponymous registry group). No new IANA registry is created.</t>
      <t>In case any of the suggested code points would have been claimed by the time the IESG approves the document for publication as an RFC, IANA is asked to assign Claim Key values from the 170-256 range.</t>
      <section anchor="name">
        <name>name</name>
        <ul spacing="normal">
          <li>
            <t>Claim Name: name</t>
          </li>
          <li>
            <t>Claim Description: End-User's full name in displayable form including all name parts, possibly including titles and suffixes, ordered according to the End-User's locale and preferences.</t>
          </li>
          <li>
            <t>JWT Claim Name: name</t>
          </li>
          <li>
            <t>Claim Key: TBD1 (170 suggested)</t>
          </li>
          <li>
            <t>Claim Value Type(s): text string</t>
          </li>
          <li>
            <t>Change Controller: IETF</t>
          </li>
          <li>
            <t>Specification Document(s): Section 5.1 of <xref target="OpenID.Core"/></t>
          </li>
        </ul>
      </section>
      <section anchor="givenname">
        <name>given_name</name>
        <ul spacing="normal">
          <li>
            <t>Claim Name: given_name</t>
          </li>
          <li>
            <t>Claim Description: Given name(s) or first name(s) of the End-User.</t>
          </li>
          <li>
            <t>JWT Claim Name: given_name</t>
          </li>
          <li>
            <t>Claim Key: TBD2 (171 suggested)</t>
          </li>
          <li>
            <t>Claim Value Type(s): text string</t>
          </li>
          <li>
            <t>Change Controller: IETF</t>
          </li>
          <li>
            <t>Specification Document(s): Section 5.1 of <xref target="OpenID.Core"/></t>
          </li>
        </ul>
      </section>
      <section anchor="familyname">
        <name>family_name</name>
        <ul spacing="normal">
          <li>
            <t>Claim Name: family_name</t>
          </li>
          <li>
            <t>Claim Description: Surname(s) or last name(s) of the End-User.</t>
          </li>
          <li>
            <t>JWT Claim Name: family_name</t>
          </li>
          <li>
            <t>Claim Key: TBD3 (172 suggested)</t>
          </li>
          <li>
            <t>Claim Value Type(s): text string</t>
          </li>
          <li>
            <t>Change Controller: IETF</t>
          </li>
          <li>
            <t>Specification Document(s): Section 5.1 of <xref target="OpenID.Core"/></t>
          </li>
        </ul>
      </section>
      <section anchor="middlename">
        <name>middle_name</name>
        <ul spacing="normal">
          <li>
            <t>Claim Name: middle_name</t>
          </li>
          <li>
            <t>Claim Description: Middle name(s) of the End-User.</t>
          </li>
          <li>
            <t>JWT Claim Name: middle_name</t>
          </li>
          <li>
            <t>Claim Key: TBD4 (173 suggested)</t>
          </li>
          <li>
            <t>Claim Value Type(s): text string</t>
          </li>
          <li>
            <t>Change Controller: IETF</t>
          </li>
          <li>
            <t>Specification Document(s): Section 5.1 of <xref target="OpenID.Core"/></t>
          </li>
        </ul>
      </section>
      <section anchor="nickname">
        <name>nickname</name>
        <ul spacing="normal">
          <li>
            <t>Claim Name: nickname</t>
          </li>
          <li>
            <t>Claim Description: Casual name of the End-User that may or may not be the same as the given_name.</t>
          </li>
          <li>
            <t>JWT Claim Name: nickname</t>
          </li>
          <li>
            <t>Claim Key: TBD5 (174 suggested)</t>
          </li>
          <li>
            <t>Claim Value Type(s): text string</t>
          </li>
          <li>
            <t>Change Controller: IETF</t>
          </li>
          <li>
            <t>Specification Document(s): Section 5.1 of <xref target="OpenID.Core"/></t>
          </li>
        </ul>
      </section>
      <section anchor="preferredusername">
        <name>preferred_username</name>
        <ul spacing="normal">
          <li>
            <t>Claim Name: preferred_username</t>
          </li>
          <li>
            <t>Claim Description: Shorthand name by which the End-User wishes to be referred to at the Resource Server.</t>
          </li>
          <li>
            <t>JWT Claim Name: preferred_username</t>
          </li>
          <li>
            <t>Claim Key: TBD6 (175 suggested)</t>
          </li>
          <li>
            <t>Claim Value Type(s): text string</t>
          </li>
          <li>
            <t>Change Controller: IETF</t>
          </li>
          <li>
            <t>Specification Document(s): Section 5.1 of <xref target="OpenID.Core"/></t>
          </li>
        </ul>
      </section>
      <section anchor="profile">
        <name>profile</name>
        <ul spacing="normal">
          <li>
            <t>Claim Name: profile</t>
          </li>
          <li>
            <t>Claim Description: URL of the End-User's profile page.</t>
          </li>
          <li>
            <t>JWT Claim Name: profile</t>
          </li>
          <li>
            <t>Claim Key: TBD7 (176 suggested)</t>
          </li>
          <li>
            <t>Claim Value Type(s): text string</t>
          </li>
          <li>
            <t>Change Controller: IETF</t>
          </li>
          <li>
            <t>Specification Document(s): Section 5.1 of <xref target="OpenID.Core"/></t>
          </li>
        </ul>
      </section>
      <section anchor="picture">
        <name>picture</name>
        <ul spacing="normal">
          <li>
            <t>Claim Name: picture</t>
          </li>
          <li>
            <t>Claim Description: URL of the End-User's profile picture. This URL <bcp14>MUST</bcp14> refer to an image file, rather than to a Web page containing an image.</t>
          </li>
          <li>
            <t>JWT Claim Name: picture</t>
          </li>
          <li>
            <t>Claim Key: TBD8 (177 suggested)</t>
          </li>
          <li>
            <t>Claim Value Type(s): text string</t>
          </li>
          <li>
            <t>Change Controller: IETF</t>
          </li>
          <li>
            <t>Specification Document(s): Section 5.1 of <xref target="OpenID.Core"/></t>
          </li>
        </ul>
      </section>
      <section anchor="website">
        <name>website</name>
        <ul spacing="normal">
          <li>
            <t>Claim Name: website</t>
          </li>
          <li>
            <t>Claim Description: URL of the End-User's Web page or blog.</t>
          </li>
          <li>
            <t>JWT Claim Name: website</t>
          </li>
          <li>
            <t>Claim Key: TBD9 (178 suggested)</t>
          </li>
          <li>
            <t>Claim Value Type(s): text string</t>
          </li>
          <li>
            <t>Change Controller: IETF</t>
          </li>
          <li>
            <t>Specification Document(s): Section 5.1 of <xref target="OpenID.Core"/></t>
          </li>
        </ul>
      </section>
      <section anchor="email">
        <name>email</name>
        <ul spacing="normal">
          <li>
            <t>Claim Name: email</t>
          </li>
          <li>
            <t>Claim Description: End-User's preferred e-mail address.</t>
          </li>
          <li>
            <t>JWT Claim Name: email</t>
          </li>
          <li>
            <t>Claim Key: TBD10 (179 suggested)</t>
          </li>
          <li>
            <t>Claim Value Type(s): text string</t>
          </li>
          <li>
            <t>Change Controller: IETF</t>
          </li>
          <li>
            <t>Specification Document(s): Section 5.1 of <xref target="OpenID.Core"/></t>
          </li>
        </ul>
      </section>
      <section anchor="emailverified">
        <name>email_verified</name>
        <ul spacing="normal">
          <li>
            <t>Claim Name: email_verified</t>
          </li>
          <li>
            <t>Claim Description: True if the End-User's e-mail address has been verified; otherwise false.</t>
          </li>
          <li>
            <t>JWT Claim Name: email_verified</t>
          </li>
          <li>
            <t>Claim Key: TBD11 (180 suggested)</t>
          </li>
          <li>
            <t>Claim Value Type(s): bool</t>
          </li>
          <li>
            <t>Change Controller: IETF</t>
          </li>
          <li>
            <t>Specification Document(s): Section 5.1 of <xref target="OpenID.Core"/></t>
          </li>
        </ul>
      </section>
      <section anchor="gender">
        <name>gender</name>
        <ul spacing="normal">
          <li>
            <t>Claim Name: gender</t>
          </li>
          <li>
            <t>Claim Description: End-User's defined gender.</t>
          </li>
          <li>
            <t>JWT Claim Name: gender</t>
          </li>
          <li>
            <t>Claim Key: TBD12 (181 suggested)</t>
          </li>
          <li>
            <t>Claim Value Type(s): text string</t>
          </li>
          <li>
            <t>Change Controller: IETF</t>
          </li>
          <li>
            <t>Specification Document(s): Section 5.1 of <xref target="OpenID.Core"/></t>
          </li>
        </ul>
      </section>
      <section anchor="birthdate">
        <name>birthdate</name>
        <ul spacing="normal">
          <li>
            <t>Claim Name: birthdate</t>
          </li>
          <li>
            <t>Claim Description: End-User's birthday, represented as an <xref target="ISO8601_1"/> YYYY-MM-DD format.</t>
          </li>
          <li>
            <t>JWT Claim Name: birthdate</t>
          </li>
          <li>
            <t>Claim Key: TBD13 (182 suggested)</t>
          </li>
          <li>
            <t>Claim Value Type(s): text string</t>
          </li>
          <li>
            <t>Change Controller: IETF</t>
          </li>
          <li>
            <t>Specification Document(s): Section 5.1 of <xref target="OpenID.Core"/></t>
          </li>
        </ul>
      </section>
      <section anchor="zoneinfo">
        <name>zoneinfo</name>
        <ul spacing="normal">
          <li>
            <t>Claim Name: zoneinfo</t>
          </li>
          <li>
            <t>Claim Description: String from IANA Time Zone Database <xref target="IANAtimezones"/> representing the End-User's time zone.</t>
          </li>
          <li>
            <t>JWT Claim Name: zoneinfo</t>
          </li>
          <li>
            <t>Claim Key: TBD14 (183 suggested)</t>
          </li>
          <li>
            <t>Claim Value Type(s): text string</t>
          </li>
          <li>
            <t>Change Controller: IETF</t>
          </li>
          <li>
            <t>Specification Document(s): Section 5.1 of <xref target="OpenID.Core"/></t>
          </li>
        </ul>
      </section>
      <section anchor="locale">
        <name>locale</name>
        <ul spacing="normal">
          <li>
            <t>Claim Name: locale</t>
          </li>
          <li>
            <t>Claim Description: End-User's locale, represented as a BCP47 <xref target="RFC5646"/> language tag.</t>
          </li>
          <li>
            <t>JWT Claim Name: locale</t>
          </li>
          <li>
            <t>Claim Key: TBD15 (184 suggested)</t>
          </li>
          <li>
            <t>Claim Value Type(s): text string</t>
          </li>
          <li>
            <t>Change Controller: IETF</t>
          </li>
          <li>
            <t>Specification Document(s): Section 5.1 of <xref target="OpenID.Core"/></t>
          </li>
        </ul>
      </section>
      <section anchor="phonenumber">
        <name>phone_number</name>
        <ul spacing="normal">
          <li>
            <t>Claim Name: phone_number</t>
          </li>
          <li>
            <t>Claim Description: End-User's preferred telephone number.</t>
          </li>
          <li>
            <t>JWT Claim Name: phone_number</t>
          </li>
          <li>
            <t>Claim Key: TBD16 (185 suggested)</t>
          </li>
          <li>
            <t>Claim Value Type(s): text string</t>
          </li>
          <li>
            <t>Change Controller: IETF</t>
          </li>
          <li>
            <t>Specification Document(s): Section 5.1 of <xref target="OpenID.Core"/></t>
          </li>
        </ul>
      </section>
      <section anchor="phonenumberverified">
        <name>phone_number_verified</name>
        <ul spacing="normal">
          <li>
            <t>Claim Name: phone_number_verified</t>
          </li>
          <li>
            <t>Claim Description:  True if the End-User's phone number has been verified; otherwise false.</t>
          </li>
          <li>
            <t>JWT Claim Name: phone_number_verified</t>
          </li>
          <li>
            <t>Claim Key: TBD17 (186 suggested)</t>
          </li>
          <li>
            <t>Claim Value Type(s): bool</t>
          </li>
          <li>
            <t>Change Controller: IETF</t>
          </li>
          <li>
            <t>Specification Document(s): Section 5.1 of <xref target="OpenID.Core"/></t>
          </li>
        </ul>
      </section>
      <section anchor="address">
        <name>address</name>
        <ul spacing="normal">
          <li>
            <t>Claim Name: address</t>
          </li>
          <li>
            <t>Claim Description: End-User's preferred postal address.</t>
          </li>
          <li>
            <t>JWT Claim Name: address</t>
          </li>
          <li>
            <t>Claim Key: TBD18 (187 suggested)</t>
          </li>
          <li>
            <t>Claim Value Type(s): map</t>
          </li>
          <li>
            <t>Change Controller: IETF</t>
          </li>
          <li>
            <t>Specification Document(s): Section 5.1 of <xref target="OpenID.Core"/></t>
          </li>
        </ul>
      </section>
      <section anchor="updatedat">
        <name>updated_at</name>
        <ul spacing="normal">
          <li>
            <t>Claim Name: updated_at</t>
          </li>
          <li>
            <t>Claim Description: Time the End-User's information was last updated. Its value is a number representing the number of seconds from 1970-01-01T00:00:00Z as measured in UTC until the date/time.</t>
          </li>
          <li>
            <t>JWT Claim Name: updated_at</t>
          </li>
          <li>
            <t>Claim Key: TBD19 (188 suggested)</t>
          </li>
          <li>
            <t>Claim Value Type(s): uint</t>
          </li>
          <li>
            <t>Change Controller: IETF</t>
          </li>
          <li>
            <t>Specification Document(s): Section 5.1 of <xref target="OpenID.Core"/></t>
          </li>
        </ul>
      </section>
    </section>
  </middle>
  <back>
    <references anchor="sec-combined-references">
      <name>References</name>
      <references anchor="sec-normative-references">
        <name>Normative References</name>
        <reference anchor="OpenID.Core" target="https://openid.net/specs/openid-connect-core-1_0.html">
          <front>
            <title>OpenID Connect Core 1.0 incorporating errata set 2</title>
            <author initials="N." surname="Sakimura" fullname="Nat Sakimura">
              <organization/>
            </author>
            <author initials="J." surname="Bradley" fullname="John Bradley">
              <organization/>
            </author>
            <author initials="M. B." surname="Jones" fullname="Michael B. Jones">
              <organization/>
            </author>
            <author initials="B. de" surname="Medeiros" fullname="Breno de Medeiros">
              <organization/>
            </author>
            <author initials="C." surname="Mortimore" fullname="Chuck Mortimore">
              <organization/>
            </author>
            <date year="2023" month="December" day="15"/>
          </front>
        </reference>
        <reference anchor="IANAtimezones" target="https://www.iana.org/time-zones">
          <front>
            <title>IANA time zones</title>
            <author>
              <organization/>
            </author>
            <date>n.d.</date>
          </front>
        </reference>
        <reference anchor="ISO8601_1" target="https://www.iso.org/standard/81801.html">
          <front>
            <title>ISO8601‑1</title>
            <author>
              <organization/>
            </author>
            <date>n.d.</date>
          </front>
        </reference>
        <reference anchor="IANA.CWT.Claims" target="https://www.iana.org/assignments/cwt">
          <front>
            <title>CBOR Web Token (CWT) Claims</title>
            <author>
              <organization>IANA</organization>
            </author>
          </front>
        </reference>
        <reference anchor="RFC8392">
          <front>
            <title>CBOR Web Token (CWT)</title>
            <author fullname="M. Jones" initials="M." surname="Jones"/>
            <author fullname="E. Wahlstroem" initials="E." surname="Wahlstroem"/>
            <author fullname="S. Erdtman" initials="S." surname="Erdtman"/>
            <author fullname="H. Tschofenig" initials="H." surname="Tschofenig"/>
            <date month="May" year="2018"/>
            <abstract>
              <t>CBOR Web Token (CWT) is a compact means of representing claims to be transferred between two parties. The claims in a CWT are encoded in the Concise Binary Object Representation (CBOR), and CBOR Object Signing and Encryption (COSE) is used for added application-layer security protection. A claim is a piece of information asserted about a subject and is represented as a name/value pair consisting of a claim name and a claim value. CWT is derived from JSON Web Token (JWT) but uses CBOR rather than JSON.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="8392"/>
          <seriesInfo name="DOI" value="10.17487/RFC8392"/>
        </reference>
        <reference anchor="RFC2119">
          <front>
            <title>Key words for use in RFCs to Indicate Requirement Levels</title>
            <author fullname="S. Bradner" initials="S." surname="Bradner"/>
            <date month="March" year="1997"/>
            <abstract>
              <t>In many standards track documents several words are used to signify the requirements in the specification. These words are often capitalized. This document defines these words as they should be interpreted in IETF documents. This document specifies an Internet Best Current Practices for the Internet Community, and requests discussion and suggestions for improvements.</t>
            </abstract>
          </front>
          <seriesInfo name="BCP" value="14"/>
          <seriesInfo name="RFC" value="2119"/>
          <seriesInfo name="DOI" value="10.17487/RFC2119"/>
        </reference>
        <reference anchor="RFC8174">
          <front>
            <title>Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words</title>
            <author fullname="B. Leiba" initials="B." surname="Leiba"/>
            <date month="May" year="2017"/>
            <abstract>
              <t>RFC 2119 specifies common key words that may be used in protocol specifications. This document aims to reduce the ambiguity by clarifying that only UPPERCASE usage of the key words have the defined special meanings.</t>
            </abstract>
          </front>
          <seriesInfo name="BCP" value="14"/>
          <seriesInfo name="RFC" value="8174"/>
          <seriesInfo name="DOI" value="10.17487/RFC8174"/>
        </reference>
        <reference anchor="RFC5646">
          <front>
            <title>Tags for Identifying Languages</title>
            <author fullname="A. Phillips" initials="A." role="editor" surname="Phillips"/>
            <author fullname="M. Davis" initials="M." role="editor" surname="Davis"/>
            <date month="September" year="2009"/>
            <abstract>
              <t>This document describes the structure, content, construction, and semantics of language tags for use in cases where it is desirable to indicate the language used in an information object. It also describes how to register values for use in language tags and the creation of user-defined extensions for private interchange. This document specifies an Internet Best Current Practices for the Internet Community, and requests discussion and suggestions for improvements.</t>
            </abstract>
          </front>
          <seriesInfo name="BCP" value="47"/>
          <seriesInfo name="RFC" value="5646"/>
          <seriesInfo name="DOI" value="10.17487/RFC5646"/>
        </reference>
      </references>
      <references anchor="sec-informative-references">
        <name>Informative References</name>
        <reference anchor="RFC7519">
          <front>
            <title>JSON Web Token (JWT)</title>
            <author fullname="M. Jones" initials="M." surname="Jones"/>
            <author fullname="J. Bradley" initials="J." surname="Bradley"/>
            <author fullname="N. Sakimura" initials="N." surname="Sakimura"/>
            <date month="May" year="2015"/>
            <abstract>
              <t>JSON Web Token (JWT) is a compact, URL-safe means of representing claims to be transferred between two parties. The claims in a JWT are encoded as a JSON object that is used as the payload of a JSON Web Signature (JWS) structure or as the plaintext of a JSON Web Encryption (JWE) structure, enabling the claims to be digitally signed or integrity protected with a Message Authentication Code (MAC) and/or encrypted.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="7519"/>
          <seriesInfo name="DOI" value="10.17487/RFC7519"/>
        </reference>
      </references>
    </references>
    <?line 297?>

<section anchor="cddl">
      <name>CDDL Schema</name>
      <figure anchor="cddl-schema">
        <name>A CDDL description of each claim</name>
        <artwork><![CDATA[
name = (TBD1 => tstr) ; "Jane Doe"
given_name = (TBD2 => tstr) ; "Jane"
family_name = (TBD3 => tstr) ; "Doe"
middle_name = (TBD4 => tstr) ; "Ellen"
nickname = (TBD5 => tstr) ; "Jane D."
preferred_username = (TBD6 => tstr) ; "j.doe"
profile = (TBD7 => tstr) ; "https://example.org/about.html"
picture = (TBD8 => tstr) ; "https://example.org/avatar.png"
website = (TBD9 => tstr) ; "https://example.org"
email = (TBD10 => tstr) ; "janedoe@example.com"
email_verified = (TBD11 => bool) ; true
gender = (TBD12 => tstr) ; "female"
birthdate = (TBD13 => tstr) ; "1970-03-22"
zoneinfo = (TBD14 => tstr) ; "America/Los_Angeles"
locale = (TBD15 => tstr) ; "en_US"
phone_number = (TBD16 => tstr) ; "+1 (425) 555-1212"
phone_number_verified = (TBD17 => bool) ; true
address = {
    &(formatted: 1) ^ => tstr, ; "1234 Hollywood Blvd. Los Angeles CA, 90210 United States of America"
    &(street_address: 2) ^ => tstr, ; "1234 Hollywood Blvd."
    &(locality: 3) ^ => tstr, ; "Los Angeles"
    &(region: 4) ^ => tstr, ; "CA"
    &(postal_code: 5) ^ => tstr, ; "90210"
    &(country: 6) ^ => tstr, ; "United States of America"
}
updated_at = (TBD19 => uint) ; 1730123071

TBD1 = 170
TBD2 = 171
TBD3 = 172
TBD4 = 173
TBD5 = 174
TBD6 = 175
TBD7 = 176
TBD8 = 177
TBD9 = 178
TBD10 = 179
TBD11 = 180
TBD12 = 181
TBD13 = 182
TBD14 = 183
TBD15 = 184
TBD16 = 185
TBD17 = 186
TBD18 = 187
TBD19 = 188
]]></artwork>
      </figure>
    </section>
    <section numbered="false" anchor="acknowledgments">
      <name>Acknowledgments</name>
      <t>TBD</t>
    </section>
    <section numbered="false" anchor="document-history">
      <name>Document History</name>
      <t>-01</t>
      <ul spacing="normal">
        <li>
          <t>Aligned terminology with OpenID Connect specification.</t>
        </li>
        <li>
          <t>Added Michael B. Jones as an editor.</t>
        </li>
      </ul>
      <t>-00</t>
      <ul spacing="normal">
        <li>
          <t>Initial working group draft, based on draft-maldant-spice-oidc-cwt-02.</t>
        </li>
      </ul>
    </section>
  </back>
  <!-- ##markdown-source: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-->

</rfc>
