[httpapi] rfc7807 errata or just "more"

Sanjay Dalal <sanjay.dalal@cal.berkeley.edu> Fri, 15 January 2021 18:46 UTC

Return-Path: <sanjay.dalal@gmail.com>
X-Original-To: httpapi@ietfa.amsl.com
Delivered-To: httpapi@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BEF633A1084 for <httpapi@ietfa.amsl.com>; Fri, 15 Jan 2021 10:46:23 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.4
X-Spam-Level:
X-Spam-Status: No, score=-1.4 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.249, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.248, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=cal-berkeley-edu.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NaTb8OqSmjiO for <httpapi@ietfa.amsl.com>; Fri, 15 Jan 2021 10:46:22 -0800 (PST)
Received: from mail-oi1-x22f.google.com (mail-oi1-x22f.google.com [IPv6:2607:f8b0:4864:20::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0602F3A108E for <httpapi@ietf.org>; Fri, 15 Jan 2021 10:46:21 -0800 (PST)
Received: by mail-oi1-x22f.google.com with SMTP id 9so10587173oiq.3 for <httpapi@ietf.org>; Fri, 15 Jan 2021 10:46:21 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cal-berkeley-edu.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to; bh=3lGFJ3+rSsGts/xjzrJ2zuCrr1MSiswHyPWmCh4/tB8=; b=p3QfXsKA7pM/E5GJj5wfB0IUhtWPAB9bIdXLjU9rmOrTk4tVrc4uUACk7uS4KDAhTD lszIiy6hriQqx2biouKE5VGVRRF66Osr7ocfuX5kXcsbzxk1kZZrcyPKxIL6nXmMTfES kbWYx+eBPXan9gGxOXJ5pIUYJNLM8Lt4hFuC7aj4PmLZUJiSxBCnJ6kqIt9tx5wyZBVl Vz1wQrUIEofH/pBR5U35U3DlxawF00jUsnZZPCc1DbBfUK5lVDrrUnCCtQGuSwdftEQo /wfeTyb+pN/H3hd42Dwy0sS06JEvQ2KljTnKHg+62rEzF3n8Xp7OyLnvgXAF2fVDsPAt zUVA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=3lGFJ3+rSsGts/xjzrJ2zuCrr1MSiswHyPWmCh4/tB8=; b=H9adtgJUcmtieyUa3oKdbd3ggKcHlH9vG4Upqp+dmzwI0DVGF/uh+wMQWOTNnnIhuI l6RV2bdkV5FHNLHZNksufKnlLps8oO6WLKdrqZh9Fyvg5UVZDP5OhT5b4nww1ddmlYvd 9pIfrgEe72Ox6bJbAhqXSjocpjmKWhqhBdnp5twL0xo1v3YGFry3AgHP0XxU9arpZYQl YilC24N8enUOx9211musVOqon8hW9ZOfp8jYvv0yG82Nj3Fxn1kUGPjazztqZLozNseN mqn+GrEYcbfkc5rKn2b0F5kMwG6n+hhhBs2ga+tQpICk5tmxcl3C1wnww2HYjjncEQdj hihQ==
X-Gm-Message-State: AOAM532GvRA4njSf6vYxVuUsKm5cB1lfQ1TTf5iuYWyANMI7rlVPTNDR BD1ZhX53HIjTM9SN5F7akj3sH3JLth5Nep1fXMzwI8RXOWC9WQ==
X-Google-Smtp-Source: ABdhPJzBTcM/YbSIqSFQ1vmd5Y8TlLRuszFQ81D33UUXub9P+rZwuQ4LB5I6v9ZgsbRUS9OeYXpeV91UXwsjskB6DAc=
X-Received: by 2002:aca:33d5:: with SMTP id z204mr6434573oiz.81.1610736380838; Fri, 15 Jan 2021 10:46:20 -0800 (PST)
MIME-Version: 1.0
From: Sanjay Dalal <sanjay.dalal@cal.berkeley.edu>
Date: Fri, 15 Jan 2021 10:46:09 -0800
Message-ID: <CAC5fHGNF0Asu_+xgGFbTSYUrAVKVSt+uOfCe1mQjFi1JL_cFzg@mail.gmail.com>
To: httpapi@ietf.org
Content-Type: multipart/alternative; boundary="000000000000ce868a05b8f4c956"
Archived-At: <https://mailarchive.ietf.org/arch/msg/httpapi/Z9kgZ4mLdxvCb3zFnX3WB7g3Qxw>
Subject: [httpapi] rfc7807 errata or just "more"
X-BeenThere: httpapi@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Building Blocks for HTTP APIs <httpapi.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/httpapi>, <mailto:httpapi-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/httpapi/>
List-Post: <mailto:httpapi@ietf.org>
List-Help: <mailto:httpapi-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/httpapi>, <mailto:httpapi-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 15 Jan 2021 19:46:54 -0000

Hello all,

Thanks folks for providing instructions on how to provide feedback to an
RFC. This feedback is for RFC 7807 <https://tools.ietf.org/html/rfc7807>,
"Problem Details for HTTP APIs".

I like RFC 7807. In fact, I have designed Error Catalog Service
<https://github.com/sdatspun2/error-catalog-service> such that the problem
types of RFC 7807 can be managed (CRUDL) and used in error responses, API
definition, API documentation, API testing, etc.

However, I find that RFC 7807 omitted one very common use case in its
proposed schema for Problem Details Object
<https://tools.ietf.org/html/rfc7807#section-3.1> (section 3.1). This
use case is about reporting of multiple errors of the same problem type in
an error response. RFC suggests defining an extension for this use case.

As you know, having multiple schema validation related errors in payload of
HTTP requests is a very common scenario for the HTTP APIs. How can we
improve the Problem Details Object schema to accommodate this common use
case? We should not expect API developers to respond with one error at a
time in the case of 400 scenarios. That would be an unpleasant developer
experience. Asking the API developers to define an extension for such a
common scenario hurts in adoption of the Problem Types.

In my opinion, instead of the proposed singular "*instance*" property of
type string, there should be an array of *instances. *You can find what we
have done for the error response of the Error Catalog service
<https://github.com/sdatspun2/error-catalog-service/blob/master/ErrorResponseInErrorCatalog.md>.There
could be other ways.

I have communicated with both Erik Wilde and Mark Nottingham about this
issue. Both of them are open to discussing a revision under this WG if the
group thinks it is necessary. Would love to get your comments, opinions,
approaches and suggestions.

thanks and regards,
sanjay


>    I am not too familiar with the process to comment an RFC but is there
in general
    a form where I can provide written feedback to existing specifications
or is
    this done through this mailing list?

>On Sat, Jan 9, 2021 at 9:40 AM Salz, Rich <rsalz=
40akamai.com@dmarc.ietf.org> wrote:
RFC's are published documents, not drafts; the name "request for comments"
is a node to IETF history.  How to provide feedback on published RFC's
depends on the amount and nature of feedback.  If you have a well-contained
technical error, you want to report an "errata" against the RFC.  If it's
more philosophical or just "more", it might be better to find the WG that
published the RFC and post to that mailing list (see above).


apology in advance if you received multiple emails.