[Ace] Protocol Action: 'Notification of Revoked Access Tokens in the Authentication and Authorization for Constrained Environments (ACE) Framework' to Proposed Standard (draft-ietf-ace-revoked-token-notification-09.txt)

The IESG <iesg-secretary@ietf.org> Fri, 18 October 2024 18:01 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
Auto-Submitted: auto-generated
Precedence: bulk
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
Message-ID: <172927448942.1567185.17161556200875402168@dt-datatracker-78dc5ccf94-w8wgc>
Date: Fri, 18 Oct 2024 11:01:29 -0700
Message-ID-Hash: SXR7F4BPILRK6DNLJV2IRBCCVX5RDZ2X
CC: The IESG <iesg@ietf.org>, ace-chairs@ietf.org, ace@ietf.org, draft-ietf-ace-revoked-token-notification@ietf.org, goran.selander@ericsson.com, paul.wouters@aiven.io, rfc-editor@rfc-editor.org
Subject: [Ace] Protocol Action: 'Notification of Revoked Access Tokens in the Authentication and Authorization for Constrained Environments (ACE) Framework' to Proposed Standard (draft-ietf-ace-revoked-token-notification-09.txt)
Archived-At: <https://mailarchive.ietf.org/arch/msg/ace/DGf7XudGjwtGRgZ_pka4pyfG_1g>

The IESG has approved the following document:
- 'Notification of Revoked Access Tokens in the Authentication and
   Authorization for Constrained Environments (ACE) Framework'
  (draft-ietf-ace-revoked-token-notification-09.txt) as Proposed Standard

This document is the product of the Authentication and Authorization for
Constrained Environments Working Group.

The IESG contact persons are Paul Wouters and Deb Cooley.

A URL of this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-ace-revoked-token-notification/




Technical Summary

   This document specifies a method of the Authentication and
   Authorization for Constrained Environments (ACE) framework, which
   allows an Authorization Server to notify Clients and Resource Servers
   (i.e., registered devices) about revoked access tokens.  As specified
   in this document, the method allows Clients and Resource Servers to
   access a Token Revocation List on the Authorization Server by using
   the Constrained Application Protocol (CoAP), with the possible
   additional use of resource observation.  Resulting (unsolicited)
   notifications of revoked access tokens complement alternative
   approaches such as token introspection, while not requiring
   additional endpoints on Clients and Resource Servers.

Working Group Summary

The working group consensus represents a strong concurrence of 7+
individuals with others being silent.

Document Quality

There is an existing implementation by Marco Rasori, CNR:
https://bitbucket.org/marco-rasori-iit/ace-java/src/ucs/

Personnel

   The Document Shepherd for this document is Göran Selander. The
   Responsible Area Director is Paul Wouters.

[Ace] Protocol Action: 'Notification of Revoked A… The IESG