[oauth-ext-review] Request to register token_endpoint_auth_method value: client_mtls

[oauth-ext-review] Request to register token_endpoint_auth_method value: client_mtls_certificate

Robache Hervé <herve.robache@stet.eu> Fri, 19 October 2018 14:03 UTC

From: Robache Hervé <herve.robache@stet.eu>
To: "oauth-ext-review@ietf.org" <oauth-ext-review@ietf.org>
Thread-Topic: Request to register token_endpoint_auth_method value: client_mtls_certificate
Thread-Index: AdRns7nmBLFLt9tpTrS4pAWOwp1dzw==
Date: Fri, 19 Oct 2018 14:03:35 +0000
Message-ID: <07ee643cff704b94b17cce5015ba8aa2@STEMES002.steteu.corp>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
Content-Type: multipart/related; boundary="_005_07ee643cff704b94b17cce5015ba8aa2STEMES002steteucorp_"; type="multipart/alternative"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth-ext-review/SjmLlGcPpnDAfAhC26NDPuDf960>
Subject: [oauth-ext-review] Request to register token_endpoint_auth_method value: client_mtls_certificate
Precedence: list

Hello

We provide specification for a API which respond to the European Payment Service Directive version 2 (PSD2).

The use of this API is based on

- Use of OAUTH2 tokens

- Use of X.509 certificates for mutual authentication between the client and the server of the API

- The use of MTLS (https://datatracker.ietf.org/doc/draft-ietf-oauth-mtls/) to link the two previous features

Being interested about using RFC 7591, we asked ourselves which value of “token_endpoint_auth_method” could be used. Our guess is that none of the pre-registered value can be used in a MTLS context.

So we would like to suggest the registration of “client_mtls_certificate” as a new value.

Best regards

Hervé ROBACHE
Direction Marketing et Développement

LIGNE DIRECTE
T. +33(0)1 55 23 55 45
herve.robache@stet.eu<mailto:herve.robache@stet.eu>

[cid:image003.png@01D14327.707582F0]

STET (SIEGE SOCIAL)
100, Esplanade du Général de Gaulle
Cœur Défense – Tour B
92932 La Défense cedex

www.stet.eu<http://www.stet.eu/>

Ce message et toutes les pièces jointes sont établis à l'intention exclusive de ses destinataires et sont confidentiels.
Si vous recevez ce message par erreur ou s'il ne vous est pas destiné, merci de le détruire ainsi que toute copie de votre système et d'en avertir immédiatement l'expéditeur.
Toute lecture non autorisée, toute utilisation de ce message qui n'est pas conforme à sa destination, toute diffusion ou toute publication, totale ou partielle, est interdite.
L'Internet ne permettant pas d'assurer l'intégrité de ce message électronique susceptible d'altération, STET décline toute responsabilité au titre de ce message dans l'hypothèse où il aurait été modifié, déformé ou falsifié.
N'imprimez ce message que si nécessaire, pensez à l'environnement.

This message and any attachments is intended solely for the intended addressees and is confidential.
If you receive this message in error, or are not the intended recipient(s), please delete it and any copies from your systems and immediately notify the sender.
Any unauthorized view, use that does not comply with its purpose, dissemination or disclosure, either whole or partial, is prohibited.
Since the internet cannot guarantee the integrity of this message which may not be reliable, STET shall not be liable for the message if modified, changed or falsified.
Do not print this message unless it is necessary, please consider the environment.

Attachment: image001.png
Attachment: image002.png

[oauth-ext-review] Request to register token_endp… Robache Hervé
Re: [oauth-ext-review] Request to register token_… Nat Sakimura

[oauth-ext-review] Request to register token_endpoint_auth_method value: client_mtls_certificate

Attachment: image001.png

Attachment: image002.png