IETF Logo Mail Archive

[Ace] Resource, Audience, and req_aud

Hannes Tschofenig <Hannes.Tschofenig@arm.com> Thu, 07 February 2019 15:24 UTC

Return-Path: <Hannes.Tschofenig@arm.com>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2AF86130F08; Thu, 7 Feb 2019 07:24:50 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.001
X-Spam-Level:
X-Spam-Status: No, score=-0.001 tagged_above=-999 required=5 tests=[DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lZlKoFnIZcna; Thu, 7 Feb 2019 07:24:47 -0800 (PST)
Received: from EUR01-DB5-obe.outbound.protection.outlook.com (mail-db5eur01on061c.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe02::61c]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 774E1130E5B; Thu, 7 Feb 2019 07:24:46 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=VmlMBfAg58vrkuAlDaHUvUwBry95RJCJZpn4Q+f2dDA=; b=d7/qipZxRurWXZjBKQbVBV8QQ5o+xKHVem1vrRRzWVPoa3d8TUOKkV1/+MsH6eUIL3BGyanQri7A9Xaw7s98mek3TEIsAHMwGC4fIb7wnQdU6f3x4H6GJhNS9Jtc0KqlrGuEHrkeXES/TgJdkN4QzSjtzLWlCR+q+tWL2tUzXMw=
Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com (10.173.75.16) by VI1PR0801MB1728.eurprd08.prod.outlook.com (10.168.67.18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1580.22; Thu, 7 Feb 2019 15:24:43 +0000
Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::3ce6:d8fa:3271:6019]) by VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::3ce6:d8fa:3271:6019%8]) with mapi id 15.20.1580.019; Thu, 7 Feb 2019 15:24:43 +0000
From: Hannes Tschofenig <Hannes.Tschofenig@arm.com>
To: "ace@ietf.org" <ace@ietf.org>
CC: "oauth@ietf.org" <oauth@ietf.org>
Thread-Topic: Resource, Audience, and req_aud
Thread-Index: AdS++E7Ly8Q8wLQXRVClxzlDwlE9TQ==
Date: Thu, 07 Feb 2019 15:24:43 +0000
Message-ID: <VI1PR0801MB21126944E558E53992EB7FD3FA680@VI1PR0801MB2112.eurprd08.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com;
x-originating-ip: [80.92.122.55]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; VI1PR0801MB1728; 6:nzd73LQR+GY7X+oW3D42HmKtcWenB5C7KomAyDdC9IbQTgCre6meoCJOA//e1prrfhL5ivFwEw8IfGsuigHA0t6jbVsY5D0gu1Pj7ZqIt/zMzhbWEwkHCgywOScpMUmKzH72mkJ+YHH5sBYbTzKdQeX+xqUsit5ZGNx1PShHifnqkpeurYQKX0LUDoKalFYY+v0ipft9YsRTMvX4NAWATtID0irPZKqlDIXWgzrkfftHkd7rOaa2E7S9cxtB6A+SVbhXdmctSttuU1YUdwOzGP7oaiuafMNwtcJEavkUgS+exJoFy2IdnkkK+VFj236VGINBqBCR4RP5oF+DDAlJ9KTVq3ynFMcQW4tjtjcvPbkZPeINu/DaOY2fHradzx5Yn0HE+uYB7pmck32uMgZIAePfp+xBHguR5HUAMG5D9PaJ95lCNzbScaGZYF59yeGNCpI1SfdVM0KX3ZYt0Y8dVg==; 5:Ga4ZANZBTjbDuqZmLz04aXaRukdZQe135Eun+iMELlai1JzNco9Eao5l53Va3HrmijvbPVUTOpB7YeRiYkvV35Dp7yFYZoaCSSnAfsMzLAaLptj/isyRZ43O+L/uIlcAOKNqtpe97XUtBKK1Dth66XhCfTFVG6dqr/5+EYglb+3UJC8iJPVs3kAgEgN3Z/yLgJRbl/OY6OsEaiRxqCZdvA==; 7:cIueBCmFNXmVqgpSIHrKqigQwSO4uOg1wZRg/l3/c5M9kScCwPYf9UMB/5O0qEt2dlfqJcpwYe/lCLYCyc0CM9p7ZxK5x65dtCekvT6Njot4kBK98YW9qwh015G5oLzVm7h60JIY9tI8ahHV+dk/VA==
x-ms-office365-filtering-correlation-id: d58e71f8-ae4c-4e3b-25d2-08d68d1062d7
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600110)(711020)(4605077)(4618075)(2017052603328)(7153060)(7193020); SRVR:VI1PR0801MB1728;
x-ms-traffictypediagnostic: VI1PR0801MB1728:
x-microsoft-antispam-prvs: <VI1PR0801MB1728C2F7A1E405DBDB52CF2EFA680@VI1PR0801MB1728.eurprd08.prod.outlook.com>
x-forefront-prvs: 0941B96580
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(376002)(396003)(366004)(39860400002)(136003)(346002)(40434004)(199004)(53754006)(189003)(25786009)(4326008)(450100002)(6436002)(53936002)(5640700003)(68736007)(6916009)(97736004)(55016002)(54896002)(256004)(1730700003)(81166006)(6306002)(186003)(5024004)(6506007)(2906002)(102836004)(26005)(9686003)(14444005)(81156014)(6116002)(3846002)(8676002)(790700001)(8936002)(99286004)(14454004)(71200400001)(71190400001)(33656002)(74316002)(478600001)(2351001)(2501003)(105586002)(7736002)(486006)(316002)(476003)(106356001)(66066001)(86362001)(7696005)(72206003); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0801MB1728; H:VI1PR0801MB2112.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: n0oQ87laoQhPlMAhhUffCtBodvtUMd3WIotnYxTKvpMq5rMQVLg9ZdVeMdd8ek+3RHa5/Xlrvgs5MUoA0KVgpxw4wUZ4uC25RD61DGxOYI9rUYdM4KGfzna7XN89Mtl/VbkCaSpQKfYAf6miBSDLvyHj7umQ6+HZKLfSibw5jfpP9Ab2LxsXcCFUt7LqDkH1zfxz+xnhGTL8WFdg1tW6aKejuJNYCgjmefq8Uhhsh4L3dqytVl9rQur3NMEA3hFhlo4KZCEL/3VbPTlBxHgAEHXkrw93dVRhgMWFelMjZZwa6E9CFp6qV9RljdA4ZAeIMd/pR5iYDHZqPR+ez95eHzD8JHGDkCT0NB+nhv3Ep5xOevA/xPCyLGJuOaHg6rF06TJ0AOJGLYHUpvrTYu9mVha+qmewHRLaam1zyMkXhVU=
Content-Type: multipart/alternative; boundary="_000_VI1PR0801MB21126944E558E53992EB7FD3FA680VI1PR0801MB2112_"
MIME-Version: 1.0
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-Network-Message-Id: d58e71f8-ae4c-4e3b-25d2-08d68d1062d7
X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Feb 2019 15:24:43.5352 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0801MB1728
Archived-At: <https://mailarchive.ietf.org/arch/msg/ace/KTFc0uixVm8QjNBdcxTzbbQ7liI>
Subject: [Ace] Resource, Audience, and req_aud
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Feb 2019 15:24:53 -0000

Hi all,

after re-reading token exchange, the resource indicator, and the ace-oauth-params drafts I am wondering whether it is really necessary to have different functionality in ACE vs. in OAuth for basic parameters.

Imagine I use an Authorization Server and I support devices that use CoAP and HTTP.


  1.  If a device uses CoAP then it has to use the req_aud parameter to indicate to the authorization server that it wants to talk to a specific resource server. It would either put a URI or a logical name there.
  2.  If a device uses HTTP then it has to use either the resource parameter to indicate to the authorization server that it wants to talk to a resource server, which is identified using a URI, or the audience parameter, if it uses a logical name.

Ciao
Hannes



IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.

v2.23.0 | Report a Bug | By Email