{
  "id": "assertion-and-credential-failures",
  "title": "Protected-resource authentication failures",
  "description": "Audience, expiry, replay, syntax, method, and authorization failures map to bounded non-disclosing errors.",
  "drafts": ["draft-kavian-agent-enrollment-protocol-04"],
  "category": "protected-resource",
  "applicability": {
    "agent": {
      "expectation": "required",
      "profile": "core-http"
    },
    "platform": {
      "expectation": "unsupported"
    },
    "service": {
      "expectation": "required",
      "profile": "core-http"
    }
  },
  "input": {"cases": ["wrong_audience", "expired_assertion", "replayed_assertion", "malformed_credential", "expired_credential", "unsupported_method", "insufficient_scope"]},
  "expected": {"wrong_audience": "not_recognized", "expired_assertion": "not_recognized", "replayed_assertion": "not_recognized", "malformed_credential": "not_recognized", "expired_credential": "not_recognized", "unsupported_method": "unsupported_authentication_method", "insufficient_scope": "insufficient_scope"}
}