The draft does not currently specify how clients/consumers should handle additional fields present in the JSON that are not defined in the spec.
To ensure forward compatibility and clearer schema validation, it is suggested to add specific language regarding extensibility.
Proposed Text (by Thibault):
"Services MAY include additional fields. Consumers MUST ignore unknown fields.".
Reference:
https://mailarchive.ietf.org/arch/msg/web-bot-auth/Yqw0r8Ry2I6wqB5huKxUQs-ApLE/
The draft does not currently specify how clients/consumers should handle additional fields present in the JSON that are not defined in the spec.
To ensure forward compatibility and clearer schema validation, it is suggested to add specific language regarding extensibility.
Proposed Text (by Thibault):
"Services MAY include additional fields. Consumers MUST ignore unknown fields.".
Reference:
https://mailarchive.ietf.org/arch/msg/web-bot-auth/Yqw0r8Ry2I6wqB5huKxUQs-ApLE/