Problem description
sinkCredential.credentialType supports PRIVATE_KEY_JWT, but no response (AcceptedAsyncResponse, ConnectivityDataResponse) ever includes sinkCredential, so jwksUri can never be returned. Per the Commonalities Notification Guide (§4.3.1, Appendix A), that only matters if a consumer wants to skip pre-sharing the provider's JWKS URI out-of-band — that path is closed here.
Also untested: PRIVATE_KEY_JWT only appears in a comment on scenario 400.07.
Expected behavior
Confirm whether relying on out-of-band jwksUri sharing is an acceptable constraint to document, or whether it should be returned. Separately, whether a credential-exchange model designed for subscriptions (request + read-back) fits a one-shot callback like this one at all may be worth raising with Commonalities rather than solving per-API.
Alternative solution
None
Additional context
https://github.com/camaraproject/Commonalities/blob/main/documentation/CAMARA-API-Event-Subscription-and-Notification-Guide.md#431-pre-requisites-for-using-credential-type-private_key_jwt
https://github.com/camaraproject/Commonalities/blob/main/documentation/CAMARA-API-Event-Subscription-and-Notification-Guide.md#appendix-a-notification-authentication-flows
camaraproject/PredictiveConnectivityData#50
Problem description
sinkCredential.credentialTypesupportsPRIVATE_KEY_JWT, but no response (AcceptedAsyncResponse,ConnectivityDataResponse) ever includessinkCredential, sojwksUrican never be returned. Per the Commonalities Notification Guide (§4.3.1, Appendix A), that only matters if a consumer wants to skip pre-sharing the provider's JWKS URI out-of-band — that path is closed here.Also untested:
PRIVATE_KEY_JWTonly appears in a comment on scenario 400.07.Expected behavior
Confirm whether relying on out-of-band
jwksUrisharing is an acceptable constraint to document, or whether it should be returned. Separately, whether a credential-exchange model designed for subscriptions (request + read-back) fits a one-shot callback like this one at all may be worth raising with Commonalities rather than solving per-API.Alternative solution
None
Additional context
https://github.com/camaraproject/Commonalities/blob/main/documentation/CAMARA-API-Event-Subscription-and-Notification-Guide.md#431-pre-requisites-for-using-credential-type-private_key_jwt
https://github.com/camaraproject/Commonalities/blob/main/documentation/CAMARA-API-Event-Subscription-and-Notification-Guide.md#appendix-a-notification-authentication-flows
camaraproject/PredictiveConnectivityData#50