From 5df8151af3f80e6e6f484c045748b70c57709e97 Mon Sep 17 00:00:00 2001
From: Justin Richer <jricher@mitre.org>
Date: Mon, 9 Dec 2013 04:56:01 -0800
Subject: [PATCH] Updated Client configuration (markdown)

---
 Client-configuration.md | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/Client-configuration.md b/Client-configuration.md
index ba1eb8c..9434c09 100644
--- a/Client-configuration.md
+++ b/Client-configuration.md
@@ -429,3 +429,24 @@ Furthermore, the client must be configured to publish its public key at a URL th
  	</bean>
 ```
 
+### Encrypted Authorization Request
+
+Builds the URL using an encrypted Request Object. 
+
+```
+<bean class="org.mitre.openid.connect.client.service.impl.EncryptedAuthRequestUrlBuilder">
+  <property name="encryptionService" ref="validatorCache" />
+  <property name="alg">
+    <bean class="com.nimbusds.jose.JWEAlgorithm">
+       <constructor-arg name="name">RSA1_5</constructor-arg>
+    </bean>
+  </property>
+  <property name="enc">
+    <bean class="com.nimbusds.jose.EncryptionMethod">
+       <constructor-arg name="name">A128CBC+HS256</constructor-arg>
+    </bean>
+  </property>
+</bean>
+```
+
+The builder must have access to the `JWKSetValidator` bean in order to find the server's public keys to encrypt to.
\ No newline at end of file