IETF Logo Mail Archive

Re: [OAUTH-WG] OAuth 2.0 Protected Resource Metadata now with WWW-Authenticate

Giuseppe De Marco <demarcog83@gmail.com> Tue, 25 July 2023 22:09 UTC

Return-Path: <demarcog83@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E6054C14CF1F for <oauth@ietfa.amsl.com>; Tue, 25 Jul 2023 15:09:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.844
X-Spam-Level:
X-Spam-Status: No, score=-1.844 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yJs-l5TIh3dO for <oauth@ietfa.amsl.com>; Tue, 25 Jul 2023 15:09:05 -0700 (PDT)
Received: from mail-ed1-x531.google.com (mail-ed1-x531.google.com [IPv6:2a00:1450:4864:20::531]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 43051C151AE0 for <oauth@ietf.org>; Tue, 25 Jul 2023 15:09:05 -0700 (PDT)
Received: by mail-ed1-x531.google.com with SMTP id 4fb4d7f45d1cf-522462d8416so1921617a12.1 for <oauth@ietf.org>; Tue, 25 Jul 2023 15:09:05 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1690322944; x=1690927744; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=PbC5OA2GSRhrZQLlU4bN+mtKeEgUHtS0lk6r4snXFto=; b=NQMJH7UABOEGlCZgfXAX0a6vOEbZZCq/a2GY7H6UBUN1cpjSaalIpwk7PkABuKW0QZ rlOB7ixO8k528fwdndz4DjIE0ESBe6pB+2GHeR2ddtihGyrhplwW86R/GySQbP4u/Sp0 Dq0YouClU9AD0+kokqXSUPX3c3AAKO39SamWNMr+AXrDCB5krxwU40lUxR2y4JJFLegd vzNq1RnXo0zUjSsED5xosbz1OlRJtwyYvSrudhNTt/HFEkC8mv5158wT9OByGQNxwc+d CaE2zI6d3iqXtOMMJ7O9Z4+z9zNIJrebjCgjuOSKwEIpYMuGBdcabbzVae08E+JlJsso Tjqw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1690322944; x=1690927744; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=PbC5OA2GSRhrZQLlU4bN+mtKeEgUHtS0lk6r4snXFto=; b=IhyEPzrMBxsw/A/0UWgTccuOLxSFa8QxXUWc7txSpMlYzn36q7sPdOdOmBRlkj9f2N v2Qc2uVvMmyWofVeoSw68KlQXCdqFVDiXPcnrfObRMJ3aodsYfx3KdNYEoVWyAmexzTe rBUw1n+KlcLxRvjuoKpc3kxsnFKWAZOB7pQujeKBZzc/rmu7CbXh5mBYKueTeQWqTZBG t9MV8/fMHA21ESVEEj1GZ6FADRcFWZbp1hM5lxTFWP9kOEpbQwmVbNg4q/isF3Ewznm6 29aYh6t2YnXkLDpasfr93jqv7Fa/IovRyLdQGfz8MPPWnfGhrUgRLjcGkliMFtBeuuGM yTbQ==
X-Gm-Message-State: ABy/qLaEwnP5m4x+AcCfHvqlkgiqrTYHLZDcEzMNMdwSNmCQxRRX7Soh ZoeNSYSvl1Br5ogOl5S2VeDk8ySDUf28fz50eGJ4TqNMH9E=
X-Google-Smtp-Source: APBJJlHFYT2qxVNqIVzjb+mqXxV6IsijXQlx1jOEYDr72zRHRVhpcGtfrEaRcTindyfFsLg9lfq7R67Sksdn6OXsUfU=
X-Received: by 2002:a50:ee18:0:b0:522:163:5e2e with SMTP id g24-20020a50ee18000000b0052201635e2emr164874eds.22.1690322943487; Tue, 25 Jul 2023 15:09:03 -0700 (PDT)
MIME-Version: 1.0
References: <MW4PR02MB742844C56F175D4E359EDD07B731A@MW4PR02MB7428.namprd02.prod.outlook.com>
In-Reply-To: <MW4PR02MB742844C56F175D4E359EDD07B731A@MW4PR02MB7428.namprd02.prod.outlook.com>
From: Giuseppe De Marco <demarcog83@gmail.com>
Date: Wed, 26 Jul 2023 00:08:52 +0200
Message-ID: <CAP_qYynyL8341xzPomQQi2K0BCmVA4aWO6qpgO4+xpHyTWGyNw@mail.gmail.com>
To: Michael Jones <michael_b_jones@hotmail.com>
Cc: "oauth@ietf.org" <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000009a3311060156fafc"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/BuUPP84XE_EZt_iL7wnCNYOsenk>
Subject: Re: [OAUTH-WG] OAuth 2.0 Protected Resource Metadata now with WWW-Authenticate
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Jul 2023 22:09:10 -0000

Hi,
I am happy that this draft is progressing, draft 01 was adopted two years
ago for the Italian Attribute Authorities (SPID Attribute Authorities)
because there was a need to publish the metadata of a RS.
I see that many steps forward have been made and in a short time. I have
read Brian's reaction and believe it is important for the evolution of the
specification, which I hereby support

Il giorno mar 11 lug 2023 alle ore 02:34 Michael Jones <
michael_b_jones@hotmail.com> ha scritto:

> In collaboration with Aaron Parecki <https://twitter.com/aaronpk>, the
> ability for OAuth 2.0 protected resource servers to return their resource
> identifiers via WWW-Authenticate has been added to the OAuth 2.0
> Protected Resource Metadata specification. This enables clients to
> dynamically learn about and use protected resources they may have no prior
> knowledge of, including learning what authorization servers can be used
> with them.
>
>
>
> This incorporates functionality originally incubated in
> draft-parecki-oauth-authorization-server-discovery-00
> <https://www.ietf.org/archive/id/draft-parecki-oauth-authorization-server-discovery-00.html>.
> Aaron and I had been asked to merge the functionality of our two drafts
> during an OAuth working group session at IETF 116. We’re both happy with
> the result!
>
>
>
> The specification is available at:
>
> ·
> https://www.ietf.org/archive/id/draft-jones-oauth-resource-metadata-04.html
>
>
>
>                                                        -- Mike
>
>
>
> P.S.  This notice was also posted at https://self-issued.info/?p=2377 and
> was referenced from
> https://twitter.com/selfissued/status/1677471513023508481.
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>

v2.23.0 | Report a Bug | By Email