Re: [OAUTH-WG] Agenda for IETF#87 Meeting

I would like to address the issue of client web apps using oauth to authenticate users--something that is not supported by the specs but people are doing anyway.  

OpenId Connect covers the issue but not in a lightweight way for both as and client. 

There seems to be a gap here.

Phil

On 2013-07-17, at 11:18, Torsten Lodderstedt <torsten@lodderstedt.net> wrote:

> Hi,
> 
> given that most charter items are (nearly) done, I would highly appreciate a discussion about further directions and new topics.
> 
> regards,
> Torsten.
> 
> Am 17.07.2013 19:37, schrieb Hannes Tschofenig:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA512
>> 
>> Hi all,
>> 
>> it is time to discuss the agenda for the meeting. Here is a strawman proposal. Let us know if you would like to add a topic to the agenda:
>> 
>> - --------
>> 
>> Web Authorization Protocol (OAuth)
>> ==================================
>> 
>> Date: WEDNESDAY, July 31, 2013
>> Time: 0900-1130 CEST
>> Room: Tiergarten 1/2
>> 
>> 
>> Agenda:
>> 
>>  * Dynamic Client Registration (TBD)
>>  https://datatracker.ietf.org/doc/draft-ietf-oauth-dyn-reg/
>>  https://datatracker.ietf.org/doc/draft-hunt-oauth-scim-client-reg/
>>    Goal: Discuss open issues with the WG document and determine
>>  whether there is interest to adopt the SCIM proposal in the WG.
>>    * JWT (Mike Jones) -- if necessary
>>  https://datatracker.ietf.org/doc/draft-ietf-oauth-json-web-token/
>>    Background: This work depends on the progress in the JOSE WG.
>>  JOSE made some progress and so the question is whether this
>>  document can enter WGLC (soon). What are the open issues?
>>    * Assertions (Mike Jones) -- if necessary
>>  https://datatracker.ietf.org/doc/draft-ietf-oauth-assertions/
>>  https://datatracker.ietf.org/doc/draft-ietf-oauth-jwt-bearer/
>>  https://datatracker.ietf.org/doc/draft-ietf-oauth-saml2-bearer/
>>    Goal: If there are still open issues we should discuss them.
>>  Expectation is that the documents are back with the IESG
>>  the week before the IETF meeting.
>>    * Security (Hannes Tschofenig)
>>  https://datatracker.ietf.org/doc/draft-ietf-oauth-v2-http-mac/
>>  https://datatracker.ietf.org/doc/draft-tschofenig-oauth-audience/
>>    Goal: Get draft-ietf-oauth-v2-http-mac to WGLC.
>>    * Other items? Rechartering?
>> 
>> - --------
>> 
>> 
>> The latest version of the agenda can be found here:
>> http://www.ietf.org/proceedings/87/agenda/agenda-87-oauth
>> 
>> 
>> Ciao
>> Hannes & Derek
>> 
>> -----BEGIN PGP SIGNATURE-----
>> Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
>> Comment: GPGTools - http://gpgtools.org
>> 
>> iQEcBAEBCgAGBQJR5tZqAAoJEGhJURNOOiAtMe0IAIjKEHfkLgMW5TJonwuRcVat
>> 2cNpc0eIQiiTIj1GnELb6QY3GvxmYyB680UtjIg3eY50bbmMd0v+iW1aSdTWAHLz
>> H3eCnMjeVLJnjYPzklNxYcjxvN1F2tC+oBk6o4jJYrGRHizf7nSIt9rbCbFU7T9M
>> kl8Z7dASnTWQYPQ21Jr41Wp/fmUhgq2OvMrpSzFEcYp1DIRz94AeZuTac7Q4buKE
>> 5PV0XWFq6n2iixnGdHmYI9uMyiSw77k48NGngvdPiefQghG0BqZIgSDvgt+3Thee
>> vXWMOCTtxn8/eBe3lvDSiGwi/2PIJztPH06Fc3+szfUnWEdFGdNt8wWk4g6tV9M=
>> =rsLq
>> -----END PGP SIGNATURE-----
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
> 
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth