Re: [oauth-ext-review] Request to update existing registrations and add 3 new registrations in the OAuth Parameters registry

Hannes Tschofenig <hannes.tschofenig@gmx.net> Fri, 22 August 2014 08:45 UTC

Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: oauth-ext-review@ietfa.amsl.com
Delivered-To: oauth-ext-review@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9BD741A00FB for <oauth-ext-review@ietfa.amsl.com>; Fri, 22 Aug 2014 01:45:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.568
X-Spam-Level:
X-Spam-Status: No, score=-2.568 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RP_MATCHES_RCVD=-0.668, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GtV6rFMlns5B for <oauth-ext-review@ietfa.amsl.com>; Fri, 22 Aug 2014 01:45:44 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.17.22]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6AD321A017C for <oauth-ext-review@ietf.org>; Fri, 22 Aug 2014 01:45:43 -0700 (PDT)
Received: from [172.16.254.100] ([80.92.114.249]) by mail.gmx.com (mrgmx101) with ESMTPSA (Nemesis) id 0Lbi2Z-1WeIuW0RcB-00lBcC; Fri, 22 Aug 2014 10:45:39 +0200
Message-ID: <53F70360.9060306@gmx.net>
Date: Fri, 22 Aug 2014 10:46:24 +0200
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.0
MIME-Version: 1.0
To: Mike Jones <Michael.Jones@microsoft.com>, "oauth-ext-review@ietf.org" <oauth-ext-review@ietf.org>
References: <4E1F6AAD24975D4BA5B16804296739439ADE7E36@TK5EX14MBXC293.redmond.corp.microsoft.com>
In-Reply-To: <4E1F6AAD24975D4BA5B16804296739439ADE7E36@TK5EX14MBXC293.redmond.corp.microsoft.com>
OpenPGP: id=4D776BC9
Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="DPOmMK0bP1NKFXlDPre1HovQAteT7Cgdk"
X-Provags-ID: V03:K0:Nrtq0veFZSBYSzJes1T3Yaxz/0y6YvRtXBQDwJRtGDLBjbjC/EP 64U8BtsbWd6Qq1eosv0LTyrNe7CZ4d6Gi+5u9n3BR+XKSPp2X5GVwk16X530hZDSAqN7L+y WPz60JNpwd+Qqi/oGMPrAIdKv+CvpYSzWbuDBKonjpdU+wMOIZh19KShEVcFX5DhhoRBLQO XyawWPsmTSLoBnQ+q1lAw==
X-UI-Out-Filterresults: notjunk:1;
Archived-At: http://mailarchive.ietf.org/arch/msg/oauth-ext-review/l14KGsKW0zzIM8ufn2MsIVGrvf0
Subject: Re: [oauth-ext-review] Request to update existing registrations and add 3 new registrations in the OAuth Parameters registry
X-BeenThere: oauth-ext-review@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "Review of proposed IANA registrations for OAuth." <oauth-ext-review.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth-ext-review>, <mailto:oauth-ext-review-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth-ext-review/>
List-Post: <mailto:oauth-ext-review@ietf.org>
List-Help: <mailto:oauth-ext-review-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth-ext-review>, <mailto:oauth-ext-review-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Aug 2014 08:45:48 -0000

Dear IANA,

I reviewed the request and it is appropriate.

Please update the references to point to the correct specifications for
the entries in the OAuth parameter registry and add the three new error
codes to the OAuth Extensions Error Registry.

Thanks a lot.

Ciao
Hannes


On 07/24/2014 04:39 PM, Mike Jones wrote:
> Dear designated experts and IANA,
> 
>  
> 
> I am writing to you on behalf of the OpenID Connect Artifact Binding
> working group requesting two registration actions.
> 
>  
> 
> 1.  The OpenID Foundation Artifact Binding Working Group has a number of
> registered parameters in the OAuth Parameters registry at
> http://www.iana.org/assignments/oauth-parameters/oauth-parameters.xhtml.  Since
> the initial registration, the OpenID Connect specifications were
> restructured and are now final.  In particular, the definitions formerly
> in http://openid.net/specs/openid-connect-messages-1_0.html has been
> moved mostly to http://openid.net/specs/openid-connect-core-1_0.html and
> in one case, to
> http://openid.net/specs/openid-connect-session-1_0.html.  Thus, the
> registered references need to be updated.  Therefore, *please replace
> every occurrence of
> http://openid.net/specs/openid-connect-messages-1_0.html* with
> http://openid.net/specs/openid-connect-core-1_0.html, other than the
> reference for the “session_state” parameter, for which the correct
> replacement is http://openid.net/specs/openid-connect-session-1_0.html.
> 
>  
> 
> 2.  Also, since the initial registration in August 2013, three
> additional errors were defined.  *Please add these three additional
> errors* to the OAuth Extensions Error Registry:
> 
>  
> 
> ·        Error name: request_not_supported
> 
> ·        Error usage location: Authorization Endpoint
> 
> ·        Related protocol extension: OpenID Connect
> 
> ·        Change controller: OpenID Foundation Artifact Binding Working
> Group - openid-specs-ab@lists.openid.net
> 
> ·        Specification document(s):
> http://openid.net/specs/openid-connect-core-1_0.html
> 
>  
> 
> ·        Error name: request_uri_not_supported
> 
> ·        Error usage location: Authorization Endpoint
> 
> ·        Related protocol extension: OpenID Connect
> 
> ·        Change controller: OpenID Foundation Artifact Binding Working
> Group - openid-specs-ab@lists.openid.net
> 
> ·        Specification document(s):
> http://openid.net/specs/openid-connect-core-1_0.html
> 
>  
> 
> ·        Error name: registration_not_supported
> 
> ·        Error usage location: Authorization Endpoint
> 
> ·        Related protocol extension: OpenID Connect
> 
> ·        Change controller: OpenID Foundation Artifact Binding Working
> Group - openid-specs-ab@lists.openid.net
> 
> ·        Specification document(s):
> http://openid.net/specs/openid-connect-core-1_0.html
> 
>  
> 
> The original registration response is included below, for your
> reference, should it be helpful to you.
> 
>  
> 
>                                                             Thank you,
> 
>                                                             -- Mike
> 
>  
> 
> -----Original Message-----
> From: Amanda Baber via RT [mailto:iana-prot-param@iana.org]
> Sent: Wednesday, August 28, 2013 1:09 AM
> To: Hannes.Tschofenig@gmx.net; Mike Jones
> Subject: [IANA #705420] Re: [oauth-ext-review] Registration of OAuth
> parameters and errors
> 
>  
> 
> Dear Mike,
> 
>  
> 
> This request is complete. Please see
> 
>  
> 
> http://www.iana.org/assignments/oauth-parameters
> 
>  
> 
> Best regards,
> 
>  
> 
> Amanda Baber
> 
> IANA Request Specialist
> 
> ICANN
> 
>  
> 
> On Fri Aug 23 11:23:31 2013, Hannes.Tschofenig@gmx.net
> <mailto:Hannes.Tschofenig@gmx.net> wrote:
> 
>> Dear IANA,
> 
>>
> 
>> I read through the request and it aims to register values to these two
> 
>> OAuth registries:
> 
>> * OAuth Parameters Registry
> 
>> * OAuth Extensions Error Registry
> 
>>
> 
>> These OAuth registries can be found here:
> 
>> http://www.iana.org/assignments/oauth-parameters/oauth-
> 
>> parameters.xhtml
> 
>>
> 
>> Both of these registries have the policy "specification required" and
> 
>> (publically accessible) specifications are available for the listed
> 
>> values.
> 
>>
> 
>> The indicated values do not conflict with any of the already
> 
>> registered values.
> 
>>
> 
>> Hence, I approve the request.
> 
>>
> 
>> Ciao
> 
>> Hannes
> 
>>
> 
>> On 07/31/2013 06:09 PM, Mike Jones wrote:
> 
>> > This is a request to register the OAuth parameters defined at
> 
>> > http://openid.net/specs/openid-connect-messages-
> 
>> 1_0.html#ParametersContents
> 
>> > and at
> 
>> > http://openid.net/specs/openid-connect-session-
> 
>> 1_0.html#ParametersContents
> 
>> > in the OAuth Parameters Registry defined in RFC 6749 to register the
> 
>> > OAuth errors defined at
> 
>> > http://openid.net/specs/openid-connect-messages-
> 
>> 1_0.html#ErrorContents
> 
>> > in the OAuth Extensions Error Registry also defined in RFC 6749.
> 
>> The
> 
>> > individual registration requests follow.
> 
>> >
> 
>> >                                                              Thank
> 
>> you,
> 
>> >
> 
>> >                                                              -- Mike
> 
>> >
> 
>> > *OAuth Parameters Registry Requests*
> 
>> >
> 
>> > ·Parameter name: nonce
> 
>> >
> 
>> > ·Parameter usage location: Authorization Request
> 
>> >
> 
>> > ·Change controller: OpenID Foundation Artifact Binding Working Group
> 
>> -
> 
>> > openid-specs-ab@lists.openid.net
> <mailto:openid-specs-ab@lists.openid.net>
> 
>> >
> 
>> > ·Specification document(s):
> 
>> > http://openid.net/specs/openid-connect-messages-1_0.html
> 
>> >
> 
>> > ·Related information: None
> 
>> >
> 
>> > ·Parameter name: display
> 
>> >
> 
>> > ·Parameter usage location: Authorization Request
> 
>> >
> 
>> > ·Change controller: OpenID Foundation Artifact Binding Working Group
> 
>> -
> 
>> > openid-specs-ab@lists.openid.net
> <mailto:openid-specs-ab@lists.openid.net>
> 
>> >
> 
>> > ·Specification document(s):
> 
>> > http://openid.net/specs/openid-connect-messages-1_0.html
> 
>> >
> 
>> > ·Related information: None
> 
>> >
> 
>> > ·Parameter name: prompt
> 
>> >
> 
>> > ·Parameter usage location: Authorization Request
> 
>> >
> 
>> > ·Change controller: OpenID Foundation Artifact Binding Working Group
> 
>> -
> 
>> > openid-specs-ab@lists.openid.net
> <mailto:openid-specs-ab@lists.openid.net>
> 
>> >
> 
>> > ·Specification document(s):
> 
>> > http://openid.net/specs/openid-connect-messages-1_0.html
> 
>> >
> 
>> > ·Related information: None
> 
>> >
> 
>> > ·Parameter name: max_age
> 
>> >
> 
>> > ·Parameter usage location: Authorization Request
> 
>> >
> 
>> > ·Change controller: OpenID Foundation Artifact Binding Working Group
> 
>> -
> 
>> > openid-specs-ab@lists.openid.net
> <mailto:openid-specs-ab@lists.openid.net>
> 
>> >
> 
>> > ·Specification document(s):
> 
>> > http://openid.net/specs/openid-connect-messages-1_0.html
> 
>> >
> 
>> > ·Related information: None
> 
>> >
> 
>> > ·Parameter name: ui_locales
> 
>> >
> 
>> > ·Parameter usage location: Authorization Request
> 
>> >
> 
>> > ·Change controller: OpenID Foundation Artifact Binding Working Group
> 
>> -
> 
>> > openid-specs-ab@lists.openid.net
> <mailto:openid-specs-ab@lists.openid.net>
> 
>> >
> 
>> > ·Specification document(s):
> 
>> > http://openid.net/specs/openid-connect-messages-1_0.html
> 
>> >
> 
>> > ·Related information: None
> 
>> >
> 
>> > ·Parameter name: claims_locales
> 
>> >
> 
>> > ·Parameter usage location: Authorization Request
> 
>> >
> 
>> > ·Change controller: OpenID Foundation Artifact Binding Working Group
> 
>> -
> 
>> > openid-specs-ab@lists.openid.net
> <mailto:openid-specs-ab@lists.openid.net>
> 
>> >
> 
>> > ·Specification document(s):
> 
>> > http://openid.net/specs/openid-connect-messages-1_0.html
> 
>> >
> 
>> > ·Related information: None
> 
>> >
> 
>> > ·Parameter name: id_token_hint
> 
>> >
> 
>> > ·Parameter usage location: Authorization Request
> 
>> >
> 
>> > ·Change controller: OpenID Foundation Artifact Binding Working Group
> 
>> -
> 
>> > openid-specs-ab@lists.openid.net
> <mailto:openid-specs-ab@lists.openid.net>
> 
>> >
> 
>> > ·Specification document(s):
> 
>> > http://openid.net/specs/openid-connect-messages-1_0.html
> 
>> >
> 
>> > ·Related information: None
> 
>> >
> 
>> > ·Parameter name: login_hint
> 
>> >
> 
>> > ·Parameter usage location: Authorization Request
> 
>> >
> 
>> > ·Change controller: OpenID Foundation Artifact Binding Working Group
> 
>> -
> 
>> > openid-specs-ab@lists.openid.net
> <mailto:openid-specs-ab@lists.openid.net>
> 
>> >
> 
>> > ·Specification document(s):
> 
>> > http://openid.net/specs/openid-connect-messages-1_0.html
> 
>> >
> 
>> > ·Related information: None
> 
>> >
> 
>> > ·Parameter name: acr_values
> 
>> >
> 
>> > ·Parameter usage location: Authorization Request
> 
>> >
> 
>> > ·Change controller: OpenID Foundation Artifact Binding Working Group
> 
>> -
> 
>> > openid-specs-ab@lists.openid.net
> <mailto:openid-specs-ab@lists.openid.net>
> 
>> >
> 
>> > ·Specification document(s):
> 
>> > http://openid.net/specs/openid-connect-messages-1_0.html
> 
>> >
> 
>> > ·Related information: None
> 
>> >
> 
>> > ·Parameter name: claims
> 
>> >
> 
>> > ·Parameter usage location: Authorization Request
> 
>> >
> 
>> > ·Change controller: OpenID Foundation Artifact Binding Working Group
> 
>> -
> 
>> > openid-specs-ab@lists.openid.net
> <mailto:openid-specs-ab@lists.openid.net>
> 
>> >
> 
>> > ·Specification document(s):
> 
>> > http://openid.net/specs/openid-connect-messages-1_0.html
> 
>> >
> 
>> > ·Related information: None
> 
>> >
> 
>> > ·Parameter name: registration
> 
>> >
> 
>> > ·Parameter usage location: Authorization Request
> 
>> >
> 
>> > ·Change controller: OpenID Foundation Artifact Binding Working Group
> 
>> -
> 
>> > openid-specs-ab@lists.openid.net
> <mailto:openid-specs-ab@lists.openid.net>
> 
>> >
> 
>> > ·Specification document(s):
> 
>> > http://openid.net/specs/openid-connect-messages-1_0.html
> 
>> >
> 
>> > ·Related information: None
> 
>> >
> 
>> > ·Parameter name: request
> 
>> >
> 
>> > ·Parameter usage location: Authorization Request
> 
>> >
> 
>> > ·Change controller: OpenID Foundation Artifact Binding Working Group
> 
>> -
> 
>> > openid-specs-ab@lists.openid.net
> <mailto:openid-specs-ab@lists.openid.net>
> 
>> >
> 
>> > ·Specification document(s):
> 
>> > http://openid.net/specs/openid-connect-messages-1_0.html
> 
>> >
> 
>> > ·Related information: None
> 
>> >
> 
>> > ·Parameter name: request_uri
> 
>> >
> 
>> > ·Parameter usage location: Authorization Request
> 
>> >
> 
>> > ·Change controller: OpenID Foundation Artifact Binding Working Group
> 
>> -
> 
>> > openid-specs-ab@lists.openid.net
> <mailto:openid-specs-ab@lists.openid.net>
> 
>> >
> 
>> > ·Specification document(s):
> 
>> > http://openid.net/specs/openid-connect-messages-1_0.html
> 
>> >
> 
>> > ·Related information: None
> 
>> >
> 
>> > ·Parameter name: id_token
> 
>> >
> 
>> > ·Parameter usage location: Authorization Response, Access Token
> 
>> Response
> 
>> >
> 
>> > ·Change controller: OpenID Foundation Artifact Binding Working Group
> 
>> -
> 
>> > openid-specs-ab@lists.openid.net
> <mailto:openid-specs-ab@lists.openid.net>
> 
>> >
> 
>> > ·Specification document(s):
> 
>> > http://openid.net/specs/openid-connect-messages-1_0.html
> 
>> >
> 
>> > ·Related information: None
> 
>> >
> 
>> > ·Parameter name: session_state
> 
>> >
> 
>> > ·Parameter usage location: Authorization Response, Access Token
> 
>> Response
> 
>> >
> 
>> > ·Change controller: OpenID Foundation Artifact Binding Working Group
> 
>> -
> 
>> > openid-specs-ab@lists.openid.net
> <mailto:openid-specs-ab@lists.openid.net>
> 
>> >
> 
>> > ·Specification document(s):
> 
>> > http://openid.net/specs/openid-connect-session-1_0.html
> 
>> >
> 
>> > ·Related information: None
> 
>> >
> 
>> > *OAuth Extensions Error Registry Requests*
> 
>> >
> 
>> > ·Error name: interaction_required
> 
>> >
> 
>> > ·Error usage location: Authorization Endpoint
> 
>> >
> 
>> > ·Related protocol extension: OpenID Connect
> 
>> >
> 
>> > ·Change controller: OpenID Foundation Artifact Binding Working Group
> 
>> -
> 
>> > openid-specs-ab@lists.openid.net
> <mailto:openid-specs-ab@lists.openid.net>
> 
>> >
> 
>> > ·Specification document(s):
> 
>> > http://openid.net/specs/openid-connect-messages-1_0.html
> 
>> >
> 
>> > ·Error name: login_required
> 
>> >
> 
>> > ·Error usage location: Authorization Endpoint
> 
>> >
> 
>> > ·Related protocol extension: OpenID Connect
> 
>> >
> 
>> > ·Change controller: OpenID Foundation Artifact Binding Working Group
> 
>> -
> 
>> > openid-specs-ab@lists.openid.net
> <mailto:openid-specs-ab@lists.openid.net>
> 
>> >
> 
>> > ·Specification document(s):
> 
>> > http://openid.net/specs/openid-connect-messages-1_0.html
> 
>> >
> 
>> > ·Error name: session_selection_required
> 
>> >
> 
>> > ·Error usage location: Authorization Endpoint
> 
>> >
> 
>> > ·Related protocol extension: OpenID Connect
> 
>> >
> 
>> > ·Change controller: OpenID Foundation Artifact Binding Working Group
> 
>> -
> 
>> > openid-specs-ab@lists.openid.net
> <mailto:openid-specs-ab@lists.openid.net>
> 
>> >
> 
>> > ·Specification document(s):
> 
>> > http://openid.net/specs/openid-connect-messages-1_0.html
> 
>> >
> 
>> > ·Error name: consent_required
> 
>> >
> 
>> > ·Error usage location: Authorization Endpoint
> 
>> >
> 
>> > ·Related protocol extension: OpenID Connect
> 
>> >
> 
>> > ·Change controller: OpenID Foundation Artifact Binding Working Group
> 
>> -
> 
>> > openid-specs-ab@lists.openid.net
> <mailto:openid-specs-ab@lists.openid.net>
> 
>> >
> 
>> > ·Specification document(s):
> 
>> > http://openid.net/specs/openid-connect-messages-1_0.html
> 
>> >
> 
>> > ·Error name: invalid_request_uri
> 
>> >
> 
>> > ·Error usage location: Authorization Endpoint
> 
>> >
> 
>> > ·Related protocol extension: OpenID Connect
> 
>> >
> 
>> > ·Change controller: OpenID Foundation Artifact Binding Working Group
> 
>> -
> 
>> > openid-specs-ab@lists.openid.net
> <mailto:openid-specs-ab@lists.openid.net>
> 
>> >
> 
>> > ·Specification document(s):
> 
>> > http://openid.net/specs/openid-connect-messages-1_0.html
> 
>> >
> 
>> > ·Error name: invalid_request_object
> 
>> >
> 
>> > ·Error usage location: Authorization Endpoint
> 
>> >
> 
>> > ·Related protocol extension: OpenID Connect
> 
>> >
> 
>> > ·Change controller: OpenID Foundation Artifact Binding Working Group
> 
>> -
> 
>> > openid-specs-ab@lists.openid.net
> <mailto:openid-specs-ab@lists.openid.net>
> 
>> >
> 
>> > ·Specification document(s):
> 
>> > http://openid.net/specs/openid-connect-messages-1_0.html
> 
>> >
> 
>> >
> 
>> >
> 
>> > _______________________________________________
> 
>> > oauth-ext-review mailing list
> 
>> > oauth-ext-review@ietf.org <mailto:oauth-ext-review@ietf.org>
> 
>> > https://www.ietf.org/mailman/listinfo/oauth-ext-review
> 
>> >
> 
>>
> 
>  
>