Re: [OAUTH-WG] Shepherd Writeup for Dynamic Client Registration Draft

Justin Richer <jricher@mitre.org> Tue, 15 July 2014 19:17 UTC

Return-Path: <jricher@mitre.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CE4DF1B2928 for <oauth@ietfa.amsl.com>; Tue, 15 Jul 2014 12:17:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.85
X-Spam-Level:
X-Spam-Status: No, score=-4.85 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.651] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0YkDfr4Ljaa6 for <oauth@ietfa.amsl.com>; Tue, 15 Jul 2014 12:17:46 -0700 (PDT)
Received: from smtpksrv1.mitre.org (smtpksrv1.mitre.org [198.49.146.77]) by ietfa.amsl.com (Postfix) with ESMTP id E00031B2924 for <oauth@ietf.org>; Tue, 15 Jul 2014 12:17:45 -0700 (PDT)
Received: from smtpksrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 706BD1F03CD; Tue, 15 Jul 2014 15:17:45 -0400 (EDT)
Received: from IMCCAS04.MITRE.ORG (imccas04.mitre.org [129.83.29.81]) by smtpksrv1.mitre.org (Postfix) with ESMTP id 62F001F070A; Tue, 15 Jul 2014 15:17:45 -0400 (EDT)
Received: from [10.146.15.61] (10.140.19.249) by IMCCAS04.MITRE.ORG (129.83.29.81) with Microsoft SMTP Server (TLS) id 14.3.174.1; Tue, 15 Jul 2014 15:17:45 -0400
Message-ID: <53C57E35.5000401@mitre.org>
Date: Tue, 15 Jul 2014 15:17:09 -0400
From: Justin Richer <jricher@mitre.org>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:24.0) Gecko/20100101 Thunderbird/24.6.0
MIME-Version: 1.0
To: Hannes Tschofenig <hannes.tschofenig@gmx.net>, "oauth@ietf.org" <oauth@ietf.org>
References: <53BBE813.3000006@gmx.net>
In-Reply-To: <53BBE813.3000006@gmx.net>
Content-Type: multipart/alternative; boundary="------------050000030908070100060502"
X-Originating-IP: [10.140.19.249]
Archived-At: http://mailarchive.ietf.org/arch/msg/oauth/E6lKwalUTyKf2anx3_79LdseRlk
Subject: Re: [OAUTH-WG] Shepherd Writeup for Dynamic Client Registration Draft
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 15 Jul 2014 19:17:48 -0000

I've implemented the core dynamic registration draft and the management 
protocol draft (including read, update, and delete), both client side 
and server side, in MITREid Connect:

https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server

We've been running this code in production at a number of organizations 
for several years, with dynamic registration being available (and used) 
for well over a year in all instances.

Our implementation includes support for initial access tokens (through a 
server configuration/extension), but it does not include an 
implementation of software statements.

And since it was asked on another thread: our implementation is also 
compliant with the OpenID Connect dynamic registration specification, 
since the two protocols are completely wire compatible by design. We 
have had both OpenID Connect and plain-OAuth clients use it.

We've also implemented the client-side of dynamic registration as part 
of this library:

https://github.com/jumbojett/OpenID-Connect-PHP/

  -- Justin


On 07/08/2014 08:46 AM, Hannes Tschofenig wrote:
> Hi all,
>
> I am working on the shepherd writeup for the dynamic client registration
> draft.
>
> You can find the latest draft here:
> https://github.com/hannestschofenig/tschofenig-ids/blob/master/shepherd-writeups/Writeup_OAuth_DynamicClientRegistration.txt
>
> As you can see it is still incomplete.
>
> I would need information about the implementation status.
>
> Ciao
> Hannes
>
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth