[OAUTH-WG] Re: Token Status List Shepherd Write-up - Implementations

[Rifaat Shekh-Yusef <[e-mail]>]

Do you have links to any of these implementations?

Regards,
 Rifaat


On Tue, Jun 10, 2025 at 4:40 AM Paul Bastian <[e-mail]> wrote:

> Hi,
>
> Bundesdruckerei implemented Status List for the German EUDI Wallet
> Challenge "FUNKE", so did several other of the Wallet participants.
>
> Best, Paul
> On 6/2/25 17:13, Michael Schwartz wrote:
>
> Christian,
>
> We implemented Session Status List in Janssen Auth Server:
> https://docs.jans.io/head/janssen-server/auth-server/endpoints/session-status-list/
>
>
> Also, we have a PR for Status List token validation in the Cedarling PDP
> which is almost done:   https://github.com/JanssenProject/jans/pull/11520
>
> - Mike
>
> --------------------------------------
> Michael Schwartz
> Gluu
> Founder/CEO
> [e-mail]
> https://www.linkedin.com/in/nynymike
>
> On Mon, Jun 2, 2025 at 9:37 AM <[e-mail]> wrote:
>
>> Send OAuth mailing list submissions to
>>         [e-mail]
>>
>> To subscribe or unsubscribe via email, send a message with subject or
>> body 'help' to
>>         [e-mail]
>>
>> You can reach the person managing the list at
>>         [e-mail]
>>
>> When replying, please edit your Subject line so it is more specific
>> than "Re: Contents of OAuth digest..."
>>
>> Today's Topics:
>>
>>    1. Re: Token Status List Shepherd Write-up - Implementations
>>       (Christian Bormann)
>>    2. Re: OAuth 2.1 Draft version 12 expired 19.05.2025
>>       (Antic Kristian (C/CYG-GE))
>>
>>
>> ----------------------------------------------------------------------
>>
>> Message: 1
>> Date: Mon, 2 Jun 2025 15:02:18 +0200
>> From: Christian Bormann <[e-mail]>
>> Subject: [OAUTH-WG] Re: Token Status List Shepherd Write-up -
>>         Implementations
>> To: Rifaat Shekh-Yusef <[e-mail]>
>> Cc: oauth <[e-mail]>
>> Message-ID: <[e-mail]>
>> Content-Type: multipart/alternative;
>>         boundary="Apple-Mail=_814837D8-8D6F-44E8-9B9B-0B27BDC45877"
>>
>> Hi Rifaat,
>>
>> We have a small list of open source implementations that we are aware of
>> and which agreed to being added to our repository:
>>
>> https://github.com/oauth-wg/draft-ietf-oauth-status-list?tab=readme-ov-file#implementations-open-source
>>
>> Regards,
>> Christian
>>
>> > On 1. Jun 2025, at 14:04, Rifaat Shekh-Yusef <[e-mail]>
>> wrote:
>> >
>> > All,
>> >
>> > As part of the shepherd write-up for the Token Status List document,
>> > we are looking for information about implementations of this draft.
>> >
>> > https://datatracker.ietf.org/doc/draft-ietf-oauth-status-list/
>> >
>> > Please, reply to this email, on the mailing list, with any
>> implementations that you are aware of to support this document.
>> >
>> > Regards,
>> > Rifaat
>> > _______________________________________________
>> > OAuth mailing list -- [e-mail]
>> > To unsubscribe send an email to [e-mail]
>>
>> -------------- next part --------------
>> A message part incompatible with plain text digests has been removed ...
>> Name: not available
>> Type: text/html
>> Size: 1492 bytes
>> Desc: not available
>>
>> ------------------------------
>>
>> Message: 2
>> Date: Mon, 2 Jun 2025 14:36:48 +0000
>> From: "Antic Kristian (C/CYG-GE)" <[e-mail]>
>> Subject: [OAUTH-WG] Re: OAuth 2.1 Draft version 12 expired 19.05.2025
>> To: Aaron Parecki <aaron=[e-mail]>, Rifaat
>>         Shekh-Yusef      <[e-mail]>
>> Cc: "[e-mail]" <[e-mail]>
>> Message-ID:  <[e-mail]
>>         PRD10.PROD.OUTLOOK.COM>
>> Content-Type: multipart/alternative;    boundary="_000_DB9PR10MB80762E
>>         CF2748CA29098F2569A162ADB9PR10MB8076EURP_"
>>
>> Hi,
>>
>> thank you both for your quick reply and Aaron for the updated draft
>> version (https://datatracker.ietf.org/doc/html/draft-ietf-oauth-v2-1-13)
>>
>> Mit freundlichen Grüßen / Best regards
>>
>> Kristian Antic
>>
>> Cyber Security - Governance Enterprise IT (C/CYG-GE)
>> Robert Bosch GmbH | Postfach 30 02 20 | 70442 Stuttgart | GERMANY |
>> www.bosch.com<http://www.bosch.com/>
>> [e-mail]<mailto:[e-mail]>
>>
>> Sitz: Stuttgart, Registergericht: Amtsgericht Stuttgart, HRB 14000;
>> Aufsichtsratsvorsitzender: Prof. Dr. Stefan Asenkerschbaumer;
>> Geschäftsführung: Dr. Stefan Hartung, Dr. Christian Fischer, Dr. Markus
>> Forschner,
>> Stefan Grosch, Dr. Markus Heyn, Dr. Frank Meyer, Katja von Raven, Dr.
>> Tanja Rückert
>>
>> From: Aaron Parecki <aaron=[e-mail]>
>> Sent: Wednesday, May 28, 2025 4:07 PM
>> To: Rifaat Shekh-Yusef <[e-mail]>
>> Cc: Antic Kristian (C/CYG-GE) <[e-mail]>;
>> [e-mail]
>> Subject: Re: [OAUTH-WG] Re: OAuth 2.1 Draft version 12 expired 19.05.2025
>>
>> I've been working on related documents, mainly the OAuth for Browser Apps
>> BCP, and haven't come back around to this one in a while.
>>
>> I just published an update that fixes some references including updating
>> the Security BCP references to RFC 9700, so it shows as an active draft
>> again.
>>
>> Aaron
>>
>>
>> On Fri, May 23, 2025 at 4:09 AM Rifaat Shekh-Yusef <
>> [e-mail]<mailto:[e-mail]>> wrote:
>> Hi Kristian,
>>
>> No, this does not mean that the document is near finalization.
>> This just means that the authors did not have a chance to work on the
>> document.
>>
>> Regards,
>>  Rifaat
>>
>>
>>
>> On Fri, May 23, 2025 at 5:02 AM Antic Kristian (C/CYG-GE) <Kristian.Antic=
>> [e-mail]<mailto:[e-mail]>>
>> wrote:
>> Dear OAuth Working Group,
>>
>> I have noticed that the latest draft (draft-ietf-oauth-v2-1-12<
>> https://datatracker.ietf.org/doc/html/draft-ietf-oauth-v2-1-12>) for
>> OAuth 2.1 has expired on May 19, 2024.
>> I would like to inquire whether this indicates that the specification is
>> nearing finalization, or if work is underway on a new draft version.
>> Thank you for your time and clarification.
>>
>> Mit freundlichen Grüßen / Best regards
>>
>> Kristian Antic
>>
>> Cyber Security - Governance Enterprise IT (C/CYG-GE)
>> Robert Bosch GmbH | Postfach 30 02 20 | 70442 Stuttgart | GERMANY |
>> www.bosch.com<http://www.bosch.com/>
>> [e-mail]<mailto:[e-mail]>
>>
>> Sitz: Stuttgart, Registergericht: Amtsgericht Stuttgart, HRB 14000;
>> Aufsichtsratsvorsitzender: Prof. Dr. Stefan Asenkerschbaumer;
>> Geschäftsführung: Dr. Stefan Hartung, Dr. Christian Fischer, Dr. Markus
>> Forschner,
>> Stefan Grosch, Dr. Markus Heyn, Dr. Frank Meyer, Katja von Raven, Dr.
>> Tanja Rückert
>>
>> _______________________________________________
>> OAuth mailing list -- [e-mail]<mailto:[e-mail]>
>> To unsubscribe send an email to [e-mail]<mailto:
>> [e-mail]>
>> _______________________________________________
>> OAuth mailing list -- [e-mail]<mailto:[e-mail]>
>> To unsubscribe send an email to [e-mail]<mailto:
>> [e-mail]>
>> -------------- next part --------------
>> A message part incompatible with plain text digests has been removed ...
>> Name: not available
>> Type: text/html
>> Size: 9718 bytes
>> Desc: not available
>>
>> ------------------------------
>>
>> Subject: Digest Footer
>>
>> _______________________________________________
>> OAuth mailing list -- [e-mail]
>> To unsubscribe send an email to [e-mail]
>>
>>
>> ------------------------------
>>
>> End of OAuth Digest, Vol 200, Issue 2
>> *************************************
>>
>
>
> ------------------------------
> *CONFIDENTIALITY NOTICE*
> This message may contain confidential or legally privileged information.
> If you are not the intended recipient, please immediately advise the
> sender by reply e-mail that you received this message, and delete this
> e-mail from your system.
> Thank you for your cooperation
>
> _______________________________________________
> OAuth mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
>
> _______________________________________________
> OAuth mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
>