IETF Logo Mail Archive

Re: [Ace] Resource, Audience, and req_aud

Hannes Tschofenig <Hannes.Tschofenig@arm.com> Thu, 07 February 2019 16:12 UTC

Return-Path: <Hannes.Tschofenig@arm.com>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4428E129B88 for <ace@ietfa.amsl.com>; Thu, 7 Feb 2019 08:12:35 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.002
X-Spam-Level:
X-Spam-Status: No, score=-0.002 tagged_above=-999 required=5 tests=[DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oodTKhNK2LlO for <ace@ietfa.amsl.com>; Thu, 7 Feb 2019 08:12:33 -0800 (PST)
Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-eopbgr140040.outbound.protection.outlook.com [40.107.14.40]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 30C01130F24 for <ace@ietf.org>; Thu, 7 Feb 2019 08:12:33 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=2+BAZoYEq5sAHk5fMfEhAHGJxBsaCjyDAdLTnYsrJ3g=; b=ly0DGN93yIdf8mYk8tNiyeIoTLa4sRGrNgZNL+l6CWZv+xRwHRFzLnhXwF+J3DsaMpI4NHtMxiTHCrvpiOaiRRNXilt6MXfAR6dpv9Y8xNStx67R1pOy/1IcWLyudni2WdktaVnSwtr7/oKQCcBuj7BMKttXZSH/j7bHnelF1QA=
Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com (10.173.75.16) by VI1PR0801MB1359.eurprd08.prod.outlook.com (10.167.198.11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1601.19; Thu, 7 Feb 2019 16:12:30 +0000
Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::3ce6:d8fa:3271:6019]) by VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::3ce6:d8fa:3271:6019%8]) with mapi id 15.20.1580.019; Thu, 7 Feb 2019 16:12:30 +0000
From: Hannes Tschofenig <Hannes.Tschofenig@arm.com>
To: Ludwig Seitz <ludwig.seitz@ri.se>, "ace@ietf.org" <ace@ietf.org>
Thread-Topic: [Ace] Resource, Audience, and req_aud
Thread-Index: AdS++E7Ly8Q8wLQXRVClxzlDwlE9TQAAjOgAAAFPX6A=
Date: Thu, 07 Feb 2019 16:12:30 +0000
Message-ID: <VI1PR0801MB2112BA5A6A6AC736575BC19BFA680@VI1PR0801MB2112.eurprd08.prod.outlook.com>
References: <VI1PR0801MB21126944E558E53992EB7FD3FA680@VI1PR0801MB2112.eurprd08.prod.outlook.com> <c62835cb-6d98-f5dc-d8d8-fe80181a8a5c@ri.se>
In-Reply-To: <c62835cb-6d98-f5dc-d8d8-fe80181a8a5c@ri.se>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com;
x-originating-ip: [80.92.122.55]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; VI1PR0801MB1359; 20:YnPL2S+XNhLAPK02N5hnK1M5Asb6I9JfTKUY8nJqZ+Pf16GnF2eueN8p40SNHjNFFW6AGYja0hCQJDtG8C21VoyJvNt9heOygI+FPmZoz5o2of+QqCHOF80dW0fUzVBdeLENrHh2SGdmqMd8lhZhT3EWH3G1ldNiUr0OQOHr+DI=
x-ms-office365-filtering-correlation-id: 014bc2d7-a59e-4746-4e50-08d68d170fc3
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600110)(711020)(4605077)(4618075)(2017052603328)(7153060)(7193020); SRVR:VI1PR0801MB1359;
x-ms-traffictypediagnostic: VI1PR0801MB1359:
x-microsoft-antispam-prvs: <VI1PR0801MB135904DEDAFDF8E943BBE5B1FA680@VI1PR0801MB1359.eurprd08.prod.outlook.com>
x-forefront-prvs: 0941B96580
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(346002)(366004)(39860400002)(136003)(376002)(396003)(189003)(199004)(40434004)(256004)(6116002)(2501003)(186003)(5024004)(14444005)(8936002)(72206003)(33656002)(305945005)(105586002)(74316002)(26005)(102836004)(71190400001)(71200400001)(316002)(229853002)(7736002)(9686003)(3846002)(106356001)(68736007)(478600001)(99286004)(6506007)(97736004)(4744005)(2906002)(76176011)(14454004)(55016002)(476003)(66066001)(110136005)(53936002)(486006)(8676002)(25786009)(6246003)(11346002)(7696005)(6436002)(81166006)(446003)(81156014)(86362001); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0801MB1359; H:VI1PR0801MB2112.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: NQHCzm2nz2CWfSPoFY978AyZ2VXkcz4kGkKpkBq0JBCQn2j88DV2CC5LfAW0iTYejJb3y92CzKybQIWnj9Np0lOb/ArIPkVpKxoToxb11RW09ONiGKaDDIlq8ltqM3EwIa2UiftfoJ66xgP7K9fHjW02hRYGUdfLvzY5FUBtgfMcPfGN60vwdlIqocbNMjIak8rtN3YexPcbBAOr6QtP+K/JC4PwzFbwjT4Oo9LxyKK5ogjsSx7dpqhHQPEEVB+zTIpkZ+HnzY7tZeQ9pHyNFfGTn6x7xnh0IDvPLTP5Gv1WWpwJMs3pLlHsMINJ0m1XwlEktjJmzWL1RffOFVkJ0SsTExVHR7xEt8CaWF39kisLAqwRVFr/9HCUw5HON6Wb/hnwSXf+P1iN3VDDnGW58Q7eWHo1y4wA/eO2XJmsnKg=
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 014bc2d7-a59e-4746-4e50-08d68d170fc3
X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Feb 2019 16:12:30.6895 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0801MB1359
Archived-At: <https://mailarchive.ietf.org/arch/msg/ace/pVMqKUtL8ObQON-NiaxVhxgR4Qw>
Subject: Re: [Ace] Resource, Audience, and req_aud
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Feb 2019 16:12:39 -0000

Hi Ludwig,

> What I understood from the feed-back is that using a parameter called "aud" in a request to the token endpoint would be interpreted as a restriction on the audience of authorization servers that are addressed by this request.

I am not talking about a parameter called 'aud'. Take a look at the token exchange spec -- the parameter is called 'audience'.
'aud' is the name of the claim.

Ciao
Hannes

IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.

v2.23.0 | Report a Bug | By Email