Re: [Jwt-reg-review] Request to register claim: "at_use_nbr"

Brian Campbell <bcampbell@pingidentity.com> Wed, 29 May 2019 17:02 UTC

Return-Path: <bcampbell@pingidentity.com>
X-Original-To: jwt-reg-review@ietfa.amsl.com
Delivered-To: jwt-reg-review@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AC237120162 for <jwt-reg-review@ietfa.amsl.com>; Wed, 29 May 2019 10:02:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.989
X-Spam-Level:
X-Spam-Status: No, score=-1.989 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=pingidentity.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BEr5glM9lrvo for <jwt-reg-review@ietfa.amsl.com>; Wed, 29 May 2019 10:02:33 -0700 (PDT)
Received: from mail-it1-x12f.google.com (mail-it1-x12f.google.com [IPv6:2607:f8b0:4864:20::12f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A73F1120155 for <jwt-reg-review@ietf.org>; Wed, 29 May 2019 10:02:33 -0700 (PDT)
Received: by mail-it1-x12f.google.com with SMTP id h11so4732469itf.5 for <jwt-reg-review@ietf.org>; Wed, 29 May 2019 10:02:33 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pingidentity.com; s=gmail; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=H5phjWYVMPwDHDp/Jh9eggjqAOYlIsG4LdTfylgFjZ8=; b=iAgGTm6NVIentxlQxhD8cThIDbGxKP5rMnWmNZcNT7w5aqSigGxUsfgkOwnCZ6eaiM 2YjYdFsCsXZGrWQrRo+4ZCW5vj4jjO37XwztweL3kNaKZoA9SqjcvTk6f7g1TdV+6lyj OrZ9QaHcis/4TWeGDlQFHX7HqK55GgFQBPG/Q=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=H5phjWYVMPwDHDp/Jh9eggjqAOYlIsG4LdTfylgFjZ8=; b=ZZc3TgnkEEAu0jROUVYUHEIxwdjjkOJRFM/9fVKLMBYjfPs/DPUiQ5Ws4l7+2053QT QO4Bo4e3c98eKkWAfsbcH71WYXbi/qFK0B1+WDsHufo7sKvaSGL7DvjIdParWpmD95ED E/X8GyMG8ESkpYHyHGXyDKNpkH5aw2gN33JoqF7O3VEVqopUpy9jVWm3O9o8xniKABlS mfkia+GSm/t39VyBDA0S1rb1MGuryCHUnkvMHg6ympWlACpi9A5dA6H5KcWq1eloW5a+ fVywD/EV2Xf0DnBFxTJ1buMF+HmIP+muRDebcaSPiTVL0baco8KOmNxpsl8nobxglQv3 FcUg==
X-Gm-Message-State: APjAAAX4wo6N0+OEGRqSVL4PSgKPWuSkIpKMNwJCVhH2VvdZL/Mtl+9Z YB5DnInY/obBYgk8P8XpCamHZkNYtByNYDJJFOWhd9Y+gtYA2BSgOvtPUFymfN4WCnHwzKRXlcm SHuoM9sW9XUiKfnQWNnpBQS5hSA==
X-Google-Smtp-Source: APXvYqw4dQTk/svH2fVe2AfQKkDRir3m0gvCo6zijF7zXb+XQTeUG91OeevoR+upLahbIvV1N8HrkmhotFViK4A0U6g=
X-Received: by 2002:a24:378b:: with SMTP id r133mr7564205itr.154.1559149352222; Wed, 29 May 2019 10:02:32 -0700 (PDT)
MIME-Version: 1.0
References: <7ddd8b990a544ac195b711f66bbebdba@xMail.etsihq.org>
In-Reply-To: <7ddd8b990a544ac195b711f66bbebdba@xMail.etsihq.org>
From: Brian Campbell <bcampbell@pingidentity.com>
Date: Wed, 29 May 2019 11:02:05 -0600
Message-ID: <CA+k3eCTppz+9cnbO4TUi40SPn5AJwS5TX-pfL9+x=fLN2F0-=g@mail.gmail.com>
To: Miguel Angel Reina Ortega <MiguelAngel.ReinaOrtega@etsi.org>
Cc: "jwt-reg-review@ietf.org" <jwt-reg-review@ietf.org>, PNNS <PNNS@etsi.org>
Content-Type: multipart/alternative; boundary="0000000000004aa31b058a09bfa5"
Archived-At: <https://mailarchive.ietf.org/arch/msg/jwt-reg-review/5qqEd9QCVkAZBQ4mNuVbpC7BEnA>
Subject: Re: [Jwt-reg-review] Request to register claim: "at_use_nbr"
X-BeenThere: jwt-reg-review@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Expert review of proposed IANA registrations for JSON Web Token \(JWT\) claims." <jwt-reg-review.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/jwt-reg-review>, <mailto:jwt-reg-review-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/jwt-reg-review/>
List-Post: <mailto:jwt-reg-review@ietf.org>
List-Help: <mailto:jwt-reg-review-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/jwt-reg-review>, <mailto:jwt-reg-review-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 29 May 2019 17:02:36 -0000

In general I think that the “at_use_nbr” claim can be registered given how
it is described in the NFV_SEC022v0-1-0-cb.docx file inside the zip file at
the
https://docbox.etsi.org/ISG/NFV/Open/Drafts/SEC022_API_Access_Token_Spec/NFV-SEC022v010.zip
link provided.

However, there are also links there to
https://openid.net/specs/openid-connect-core-1_0.html#StandardClaims and
https://portal.etsi.org/webapp/WorkProgram/Report_WorkItem.asp?WKI_ID=54060
which are confusing and/or don't seem right.

Also the NFV_SEC022v0-1-0-cb.docx document also still has "scope" in the
JSON Web Token Claims registry which needs to be removed. Because
ultimately I think IANA works off of the specification document itself.



On Sun, May 26, 2019 at 9:36 PM Miguel Angel Reina Ortega <
MiguelAngel.ReinaOrtega@etsi.org> wrote:

> Dear,
>
> On behalf of ETSI NFV ISG, I would like to submit the following
> registration request for the “JSON Web Token” registry:
>
>    - Claim Name: “at_use_nbr”
>    - Claim Description: Number of API requests for which the access token
>    can be used.
>    - Change Controller: ETSI (pnns@etsi.org)
>    - Specification Document(s): Clause 5.5
>    <https://openid.net/specs/openid-connect-core-1_0.html#StandardClaims>
>    of the present ETSI GS NFV-SEC 022
>    <https://portal.etsi.org/webapp/WorkProgram/Report_WorkItem.asp?WKI_ID=54060>
>    (
>    https://docbox.etsi.org/ISG/NFV/Open/Drafts/SEC022_API_Access_Token_Spec/NFV-SEC022v010.zip
>    )
>
> Please, note that once the specification is approved, the pointer to the
> specification will be updated.
>
>
>
> Best regards.
>
>
>
>
> -----------------------------------------------------------------------------------------------------------------
>
> *Miguel Angel Reina Ortega **–* Testing Expert
>
> Centre for Testing and Interoperability (CTI)
>
> *ETSI* ● www.etsi.org*miguelangel.reinaortega@etsi.org
> <miguelangel.reinaortega@etsi.org>*
>
> Phone: +33 (0)4 92 94 43 49 ● Mobile: +33 (0)6 76 73 60 99
>
>
>
> This email may contain confidential information and is intended for
>
> the use of the addressee only. Any unauthorized use may be unlawful.
>
> If you receive this email by mistake, please advise the sender
>
> immediately by using the reply facility in your email software.
>
> Thank you for your co-operation.
>
>
> _______________________________________________
> Jwt-reg-review mailing list
> Jwt-reg-review@ietf.org
> https://www.ietf.org/mailman/listinfo/jwt-reg-review
>

-- 
_CONFIDENTIALITY NOTICE: This email may contain confidential and privileged 
material for the sole use of the intended recipient(s). Any review, use, 
distribution or disclosure by others is strictly prohibited.  If you have 
received this communication in error, please notify the sender immediately 
by e-mail and delete the message and any file attachments from your 
computer. Thank you._