Skip to content

docs(status-list): pin Token Status List to draft 21 - #135

Merged
daniel-mader merged 1 commit into
mainfrom
claude/inspiring-archimedes-echxvg-status-list-draft
Oct 26, 2026
Merged

daniel-mader merged 1 commit into
mainfrom
claude/inspiring-archimedes-echxvg-status-list-draft

Conversation

@daniel-mader

Copy link
Copy Markdown
Contributor

The status_list module docs, FEATURES.md and DESIGN.md named the Token Status List draft without a version. This PR names draft-ietf-oauth-status-list-21, the latest; it is not yet an RFC.

Why draft 21

  • Section numbers: the ones the docs cite (§4 the list, §5.1 the JWT token, §6.1 the status claim, §8 verification) match draft 21's text. I checked them against the draft's draft-ietf-oauth-status-list-21 tag.
  • Behaviour:
    • The test vectors are the draft's own, and match draft 14 through 21.
    • The application-specific status types are 0x03 and 0x0C–0x0F; draft 14 dropped 0x0B.
    • An out-of-range index is refused, a MUST since draft 16.
    • Redirects and Accept follow draft 16 onwards.

Changes

  • src/status_list/mod.rs:
    • The module docs link draft 21 and say their section numbers are its own.
    • They list what the module leaves out:
      • the CBOR and CWT formats (§4.3, §5.2, §6.3);
      • historical resolution (§8.4);
      • following an aggregation_uri (§9; StatusList only carries one);
      • caching by ttl (§13.7; StatusListToken only carries it);
      • the X.509 extended key usage (§10).
  • docs/FEATURES.md: the specification table says "draft 21", and its link points at that version.
  • docs/DESIGN.md: the status_list paragraph says "draft 21".

Checks

  • cargo fmt --check.
  • cargo doc --all-features with -D warnings (the new link).
  • The status_list doctests.

Generated by Claude Code

The module and FEATURES.md named the draft without a version, though the
section numbers the docs cite are those of draft-ietf-oauth-status-list-21.
Name it and link that version, and list what of it the module leaves out:
the CBOR and CWT formats, historical resolution, following an
`aggregation_uri`, caching by `ttl` and the X.509 extended key usage.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PB1rHNJ3YpjogEUJQYccc2
@coderabbitai

coderabbitai Bot commented Oct 26, 2026

Copy link
Copy Markdown

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 42 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

Run configuration
Commits

Reviewing files that changed from the base of the PR and between f093804 and 2eb408c.

Files selected for processing: 3
  • docs/DESIGN.md
  • docs/FEATURES.md
  • src/status_list/mod.rs
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@codecov

codecov Bot commented Oct 26, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@daniel-mader
daniel-mader merged commit 8377ed5 into main Oct 26, 2026
32 checks passed
@daniel-mader
daniel-mader deleted the claude/inspiring-archimedes-echxvg-status-list-draft branch October 26, 2026 22:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants