[OAUTH-WG] Weekly github digest (OAuth Activity Summary)

[Repository Activity Summary Bot <[e-mail]>]

Events without label "editorial"

Issues
------
* oauth-wg/oauth-identity-chaining (+0/-3/💬3)
  3 issues received 3 new comments:
  - #146 Improve examples in the appendix (1 by bc-pi)
    https://github.com/oauth-wg/oauth-identity-chaining/issues/146 
  - #139 Updates to reflect changes to RFC7523 (jwt_privatekey attack) (1 by bc-pi)
    https://github.com/oauth-wg/oauth-identity-chaining/issues/139 
  - #120 OAuth client acting as a client (1 by bc-pi)
    https://github.com/oauth-wg/oauth-identity-chaining/issues/120 

  3 issues closed:
  - Required `requested_token_type` parameter https://github.com/oauth-wg/oauth-identity-chaining/issues/111 
  - WGLC (2 of ?): claims/token transcription/rewrite security https://github.com/oauth-wg/oauth-identity-chaining/issues/170 
  - WGLC (1 of ?): trust relationship realization https://github.com/oauth-wg/oauth-identity-chaining/issues/169 

* oauth-wg/oauth-transaction-tokens (+0/-0/💬14)
  10 issues received 14 new comments:
  - #232 Need consistent normative language for txn claim (1 by PieterKas)
    https://github.com/oauth-wg/oauth-transaction-tokens/issues/232 [WGLC Feedback] 
  - #231 Describe parameter use (1 by PieterKas)
    https://github.com/oauth-wg/oauth-transaction-tokens/issues/231 [WGLC Feedback] 
  - #230 Clarify "JWT Representation" (1 by PieterKas)
    https://github.com/oauth-wg/oauth-transaction-tokens/issues/230 [WGLC Feedback] 
  - #229 Consider "Authorization surface" (1 by PieterKas)
    https://github.com/oauth-wg/oauth-transaction-tokens/issues/229 [WGLC Feedback] 
  - #228 Clarify claim usage (1 by PieterKas)
    https://github.com/oauth-wg/oauth-transaction-tokens/issues/228 [WGLC Feedback] 
  - #222 Should tctx field be a MUST (1 by ashayraut)
    https://github.com/oauth-wg/oauth-transaction-tokens/issues/222 [WGLC Feedback] 
  - #217 Transaction token Lifetime extension (1 by ashayraut)
    https://github.com/oauth-wg/oauth-transaction-tokens/issues/217 [WGLC Feedback] 
  - #194 Reconsider 'purp' claim scope (4 by PieterKas, bc-pi, dagdagdag83)
    https://github.com/oauth-wg/oauth-transaction-tokens/issues/194 [WGLC Feedback] 
  - #193 Rationale for 'txn' being REQUIRED (2 by ashayraut, bc-pi)
    https://github.com/oauth-wg/oauth-transaction-tokens/issues/193 [WGLC Feedback] 
  - #191 Exception for self-signed JWTs (1 by jsalowey)
    https://github.com/oauth-wg/oauth-transaction-tokens/issues/191 [WGLC Feedback] 

* oauth-wg/oauth-sd-jwt-vc (+1/-0/💬7)
  1 issues created:
  - StringOrURI should probably not be used (by bc-pi)
    https://github.com/oauth-wg/oauth-sd-jwt-vc/issues/343 

  3 issues received 7 new comments:
  - #343 StringOrURI should probably not be used (3 by adeinega, bc-pi)
    https://github.com/oauth-wg/oauth-sd-jwt-vc/issues/343 
  - #342 Remove JSON schema from Type Metadata (1 by bc-pi)
    https://github.com/oauth-wg/oauth-sd-jwt-vc/issues/342 
  - #247 Potential Privacy implications of verifier knowing display information (3 by bc-pi, cre8)
    https://github.com/oauth-wg/oauth-sd-jwt-vc/issues/247 [pending close] [blocked] 

* oauth-wg/draft-ietf-oauth-attestation-based-client-auth (+0/-3/💬0)
  3 issues closed:
  - Allow MAC as signature algorithms? https://github.com/oauth-wg/draft-ietf-oauth-attestation-based-client-auth/issues/130 
  - Add option without PoP but with ad-hoc client attetation and nonce https://github.com/oauth-wg/draft-ietf-oauth-attestation-based-client-auth/issues/111 [ready-for-pr] 
  - Client Attestation HTTP Headers https://github.com/oauth-wg/draft-ietf-oauth-attestation-based-client-auth/issues/118 [discuss] 

* oauth-wg/oauth-identity-assertion-authz-grant (+3/-0/💬6)
  3 issues created:
  - Clarify that IdP client can be mapped via ID-JAG to AS specific client (by mcguinness)
    https://github.com/oauth-wg/oauth-identity-assertion-authz-grant/issues/45 
  - Include more examples of claims in the id-jag (by meghnadubey)
    https://github.com/oauth-wg/oauth-identity-assertion-authz-grant/issues/43 
  - IdP metadata recommendation (by meghnadubey)
    https://github.com/aaronpk/draft-parecki-oauth-identity-assertion-authz-grant/issues/38 

  4 issues received 6 new comments:
  - #45 Clarify that IdP client can be mapped via ID-JAG to AS specific client (3 by mcguinness, meghnadubey)
    https://github.com/oauth-wg/oauth-identity-assertion-authz-grant/issues/45 
  - #41 Clarify ID-JAG is a typed profile of JWT Assertion Grant (1 by meghnadubey)
    https://github.com/oauth-wg/oauth-identity-assertion-authz-grant/issues/41 
  - #40 Editorial cleanup to make clear interaction and role of the AS for the Resource App (1 by meghnadubey)
    https://github.com/oauth-wg/oauth-identity-assertion-authz-grant/issues/40 
  - #39 Adopt Tenant Claim from OpenID Enterprise Extensions for ID-JAG (1 by meghnadubey)
    https://github.com/oauth-wg/oauth-identity-assertion-authz-grant/issues/39 

* oauth-wg/draft-ietf-oauth-rfc8725bis (+0/-1/💬1)
  1 issues received 1 new comments:
  - #19 Representation of time values to void the 2038 bug (1 by selfissued)
    https://github.com/oauth-wg/draft-ietf-oauth-rfc8725bis/issues/19 

  1 issues closed:
  - Markdown magic https://github.com/oauth-wg/draft-ietf-oauth-rfc8725bis/issues/20 



Pull requests
-------------
* oauth-wg/oauth-identity-chaining (+2/-1/💬0)
  2 pull requests submitted:
  - six seven (by bc-pi)
    https://github.com/oauth-wg/oauth-identity-chaining/pull/173 
  - six seven (by bc-pi)
    https://github.com/oauth-wg/oauth-identity-chaining/pull/172 

  1 pull requests merged:
  - prospective changes from WGLC reviews
    https://github.com/oauth-wg/oauth-identity-chaining/pull/171 

* oauth-wg/oauth-transaction-tokens (+4/-5/💬2)
  4 pull requests submitted:
  - Clarify "request_context" (by PieterKas)
    https://github.com/oauth-wg/oauth-transaction-tokens/pull/247 
  - Remove "surface" to describe extend of authorization (by PieterKas)
    https://github.com/oauth-wg/oauth-transaction-tokens/pull/246 
  - Delete "represenntation" (by PieterKas)
    https://github.com/oauth-wg/oauth-transaction-tokens/pull/245 
  - considerations for internal requests (by jsalowey)
    https://github.com/oauth-wg/oauth-transaction-tokens/pull/244 

  2 pull requests received 2 new comments:
  - #240 added internal flow (1 by jsalowey)
    https://github.com/oauth-wg/oauth-transaction-tokens/pull/240 
  - #239 Clarify authentication requriements (1 by PieterKas)
    https://github.com/oauth-wg/oauth-transaction-tokens/pull/239 

  5 pull requests merged:
  - Multiple TTS Instances
    https://github.com/oauth-wg/oauth-transaction-tokens/pull/242 
  - renamed microservice to workload
    https://github.com/oauth-wg/oauth-transaction-tokens/pull/185 
  - Delete draft-ietf-oauth-transaction-tokens-03.md
    https://github.com/oauth-wg/oauth-transaction-tokens/pull/187 
  - Delete "represenntation"
    https://github.com/oauth-wg/oauth-transaction-tokens/pull/245 
  - Remove "surface" to describe extend of authorization
    https://github.com/oauth-wg/oauth-transaction-tokens/pull/246 

* oauth-wg/oauth-sd-jwt-vc (+1/-0/💬0)
  1 pull requests submitted:
  - Remove JSON schema from Type Metadata (by bc-pi)
    https://github.com/oauth-wg/oauth-sd-jwt-vc/pull/345 

* oauth-wg/draft-ietf-oauth-attestation-based-client-auth (+2/-3/💬7)
  2 pull requests submitted:
  - mandate header fields (by c2bo)
    https://github.com/oauth-wg/draft-ietf-oauth-attestation-based-client-auth/pull/148 
  - add use_fresh_attestation error type (by c2bo)
    https://github.com/oauth-wg/draft-ietf-oauth-attestation-based-client-auth/pull/147 

  3 pull requests received 7 new comments:
  - #147 add use_fresh_attestation error type (5 by c2bo, panva)
    https://github.com/oauth-wg/draft-ietf-oauth-attestation-based-client-auth/pull/147 
  - #146 DPoP Optimisation (1 by paulbastian)
    https://github.com/oauth-wg/draft-ietf-oauth-attestation-based-client-auth/pull/146 
  - #142 70 register as and client metadata for algorithm negotiation of attestations and pops (1 by paulbastian)
    https://github.com/oauth-wg/draft-ietf-oauth-attestation-based-client-auth/pull/142 

  3 pull requests merged:
  - remove restrictions to not allow MAC-based algorithms
    https://github.com/oauth-wg/draft-ietf-oauth-attestation-based-client-auth/pull/141 
  - add use_fresh_attestation error type
    https://github.com/oauth-wg/draft-ietf-oauth-attestation-based-client-auth/pull/147 
  - mandate header fields
    https://github.com/oauth-wg/draft-ietf-oauth-attestation-based-client-auth/pull/148 

* oauth-wg/draft-ietf-oauth-rfc8725bis (+0/-1/💬0)
  1 pull requests merged:
  - Venue info and boilerplate directive
    https://github.com/oauth-wg/draft-ietf-oauth-rfc8725bis/pull/21 


Repositories tracked by this digest:
-----------------------------------
* https://github.com/oauth-wg/oauth-browser-based-apps
* https://github.com/oauth-wg/oauth-identity-chaining
* https://github.com/oauth-wg/oauth-transaction-tokens
* https://github.com/oauth-wg/oauth-sd-jwt-vc
* https://github.com/oauth-wg/draft-ietf-oauth-resource-metadata
* https://github.com/oauth-wg/oauth-cross-device-security
* https://github.com/oauth-wg/oauth-selective-disclosure-jwt
* https://github.com/oauth-wg/oauth-v2-1
* https://github.com/oauth-wg/draft-ietf-oauth-status-list
* https://github.com/oauth-wg/draft-ietf-oauth-attestation-based-client-auth
* https://github.com/oauth-wg/oauth-identity-assertion-authz-grant
* https://github.com/oauth-wg/draft-ietf-oauth-rfc8725bis
* https://github.com/oauth-wg/draft-ietf-oauth-rfc7523bis
* https://github.com/oauth-wg/oauth-first-party-apps


-- 
To have a summary like this sent to your list, see: https://github.com/ietf-github-services/activity-summary