OpenID from EN to CN

0.6
LSZ 2016-08-06 16:33:42 +08:00
parent 3ff70e21be
commit 168e2beba2
1 changed files with 22 additions and 24 deletions

View File

@ -1415,13 +1415,12 @@
ID Token</h3> ID Token</h3>
<p> <p>
The primary extension that OpenID Connect makes to OAuth 2.0 OpenID Connect的主要扩展是允许使用OAuth2.0的
to enable End-Users to be Authenticated 最终用户(End-Users)通过ID Token数据结构进行身份认证.
is the ID Token data structure. ID Token是一个安全的令牌它包含客户端去授权服务器
The ID Token is a security token that contains Claims about the 进行最终用户(End-User)的认证相关的Claims,
Authentication of an End-User by an Authorization Server when using a Client, 和其他潜在的请求Claims.
and potentially other requested Claims. ID Token的具体表现为
The ID Token is represented as a
<a class="info" href="#JWT">JSON Web Token <a class="info" href="#JWT">JSON Web Token
(JWT)<span> (</span><span class="info">Jones, M., Bradley, J., and N. Sakimura, “JSON Web Token (JWT),” July&nbsp;2014.</span><span>)</span></a> (JWT)<span> (</span><span class="info">Jones, M., Bradley, J., and N. Sakimura, “JSON Web Token (JWT),” July&nbsp;2014.</span><span>)</span></a>
[JWT]. [JWT].
@ -1429,8 +1428,8 @@
</p> </p>
<p> <p>
The following Claims are used within the ID Token 下列的Claims是用于ID Token中的包括在
for all OAuth 2.0 flows used by OpenID Connect: 所有OAuth2.0流程中使用OpenID Connect:
</p> </p>
@ -1620,41 +1619,40 @@
</p> </p>
<p> <p>
ID Tokens MAY contain other Claims. ID Tokens 允许(MAY)包括其他的Claims.
Any Claims used that are not understood MUST be ignored. 任何不被理解的Claims必须(MUST)被忽略.
See Sections 查看
<a class="info" href="#CodeIDToken">3.1.3.6<span> (</span><span <a class="info" href="#CodeIDToken">3.1.3.6<span> (</span><span
class="info">ID Token</span><span>)</span></a>, class="info">ID Token</span><span>)</span></a>,
<a class="info" <a class="info"
href="#HybridIDToken">3.3.2.11<span> (</span><span href="#HybridIDToken">3.3.2.11<span> (</span><span
class="info">ID Token</span><span>)</span></a>, class="info">ID Token</span><span>)</span></a>,
<a class="info" href="#StandardClaims">5.1<span> (</span><span <a class="info" href="#StandardClaims">5.1<span> (</span><span
class="info">Standard Claims</span><span>)</span></a>, and class="info">Standard Claims</span><span>)</span></a>,
<a class="info" <a class="info"
href="#SelfIssuedResponse">7.4<span> (</span><span href="#SelfIssuedResponse">7.4<span> (</span><span
class="info">Self-Issued OpenID Provider Response</span><span>)</span></a> class="info">Self-Issued OpenID Provider Response</span><span>)</span></a>
for additional Claims defined by this specification. 章节了解本规范中定义的其他Claims.
</p> </p>
<p> <p>
ID Tokens MUST be signed using <a class="info" ID Token必须(MUST)使用 <a class="info"
href="#JWS">JWS<span> (</span><span href="#JWS">JWS<span> (</span><span
class="info">Jones, M., Bradley, J., and N. Sakimura, “JSON Web Signature (JWS),” July&nbsp;2014.</span><span>)</span></a> class="info">Jones, M., Bradley, J., and N. Sakimura, “JSON Web Signature (JWS),” July&nbsp;2014.</span><span>)</span></a>
[JWS] and optionally both signed and then [JWS] 进行签名与额外的方式进行相互签名
encrypted using <a class="info" 且各自使用 <a class="info"
href="#JWS">JWS<span> (</span><span href="#JWS">JWS<span> (</span><span
class="info">Jones, M., Bradley, J., and N. Sakimura, “JSON Web Signature (JWS),” July&nbsp;2014.</span><span>)</span></a> class="info">Jones, M., Bradley, J., and N. Sakimura, “JSON Web Signature (JWS),” July&nbsp;2014.</span><span>)</span></a>
[JWS] and <a class="info" href="#JWE">JWE<span> (</span><span [JWS] <a class="info" href="#JWE">JWE<span> (</span><span
class="info">Jones, M., Rescorla, E., and J. Hildebrand, “JSON Web Encryption (JWE),” July&nbsp;2014.</span><span>)</span></a> class="info">Jones, M., Rescorla, E., and J. Hildebrand, “JSON Web Encryption (JWE),” July&nbsp;2014.</span><span>)</span></a>
[JWE] respectively, thereby providing [JWE] 进行加密, 从而提供认证, 完整性, 不可否认,
authentication, integrity, 与可选性, 保密性,
non-repudiation, and optionally, confidentiality, 详见 <a class="info"
per <a class="info"
href="#SigningOrder">Section&nbsp;16.14<span> (</span><span href="#SigningOrder">Section&nbsp;16.14<span> (</span><span
class="info">Signing and Encryption Order</span><span>)</span></a>. class="info">Signing and Encryption Order</span><span>)</span></a>.
If the ID Token is encrypted, it MUST be signed then encrypted, 如果 ID Token 是加密的, 它必须(MUST) 被签名然后加密,
with the result being a Nested JWT, as defined in <a class="info" 其结果是一个Nested JWT, 被称作 <a class="info"
href="#JWT">[JWT]<span> (</span><span href="#JWT">[JWT]<span> (</span><span
class="info">Jones, M., Bradley, J., and N. Sakimura, “JSON Web Token (JWT),” July&nbsp;2014.</span><span>)</span></a>. class="info">Jones, M., Bradley, J., and N. Sakimura, “JSON Web Token (JWT),” July&nbsp;2014.</span><span>)</span></a>.
ID Tokens MUST NOT use <tt>none</tt> ID Tokens MUST NOT use <tt>none</tt>