Re: [OAUTH-WG] Confirmation: Call for Adoption of "OAuth Token Introspection" as an OAuth Working Group Item

George Fletcher <gffletch@aol.com> Tue, 29 July 2014 22:24 UTC

Return-Path: <gffletch@aol.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 66C391A0B08 for <oauth@ietfa.amsl.com>; Tue, 29 Jul 2014 15:24:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.9
X-Spam-Level:
X-Spam-Status: No, score=-0.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FROM=0.001, FREEMAIL_REPLY=1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VY1rLpYYU0W4 for <oauth@ietfa.amsl.com>; Tue, 29 Jul 2014 15:24:46 -0700 (PDT)
Received: from omr-d01.mx.aol.com (omr-d01.mx.aol.com [205.188.252.208]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9D71B1B2863 for <oauth@ietf.org>; Tue, 29 Jul 2014 15:24:45 -0700 (PDT)
Received: from mtaout-mcd02.mx.aol.com (mtaout-mcd02.mx.aol.com [172.26.223.206]) by omr-d01.mx.aol.com (Outbound Mail Relay) with ESMTP id 7B13A700000A2; Tue, 29 Jul 2014 18:24:44 -0400 (EDT)
Received: from [10.181.176.18] (unknown [10.181.176.18]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by mtaout-mcd02.mx.aol.com (MUA/Third Party Client Interface) with ESMTPSA id 4636D38000096; Tue, 29 Jul 2014 18:24:44 -0400 (EDT)
Message-ID: <53D81F2C.2060700@aol.com>
Date: Tue, 29 Jul 2014 18:24:44 -0400
From: George Fletcher <gffletch@aol.com>
Organization: AOL LLC
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:24.0) Gecko/20100101 Thunderbird/24.6.0
MIME-Version: 1.0
To: Phil Hunt <phil.hunt@oracle.com>, Thomas Broyer <t.broyer@gmail.com>
References: <53D6895F.4050104@gmx.net> <CAEayHEM+pqDqv1qx=Z-qhNuYM-s2cV0z=sQb_FAJaGwcLpq_rQ@mail.gmail.com> <20A36D56-D581-4EDE-9DEA-D3F9C48AD20B@oracle.com>
In-Reply-To: <20A36D56-D581-4EDE-9DEA-D3F9C48AD20B@oracle.com>
Content-Type: multipart/alternative; boundary="------------000905090208050307080007"
x-aol-global-disposition: G
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com; s=20140625; t=1406672684; bh=uOPZC0vhw7Ecf+KBkXBFCCfRi6QDIAFW6WHwqMhMK+8=; h=From:To:Subject:Message-ID:Date:MIME-Version:Content-Type; b=bUub+JdWrEz1WdCQAp2R0y+5VmYHKe7ML/PrrfEGq74UWEbFm56aae/8NfZs5AWp/ Re6HJulkT+fGZVsrxNzg+J7SIg8iXrANy14MDnictGt8aDjTpjQI/bgUMsv52u6mDu CzmKSxZhW2CNBCiEJm0+oOtaEdoVqOg/GXSpGSS0=
x-aol-sid: 3039ac1adfce53d81f2c7661
X-AOL-IP: 10.181.176.18
Archived-At: http://mailarchive.ietf.org/arch/msg/oauth/JQXxeX5bcT4Scgz3-CmmFnBZ6iU
Cc: "oauth@ietf.org" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Confirmation: Call for Adoption of "OAuth Token Introspection" as an OAuth Working Group Item
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 29 Jul 2014 22:24:48 -0000

We also have a use case where the AS is provided by a partner and the RS 
is provided by AOL. Being able to have a standardized way of validating 
and getting data about the token from the AS would make our 
implementation much simpler as we can use the same mechanism for all 
Authorization Servers and not have to implement one off solutions for 
each AS.

Thanks,
George

On 7/28/14, 8:11 PM, Phil Hunt wrote:
> Could we have some discussion on the interop cases?
>
> Is it driven by scenarios where AS and resource are separate domains? 
> Or may this be only of interest to specific protocols like UMA?
>
> From a technique principle, the draft is important and sound. I am 
> just not there yet on the reasons for an interoperable standard.
>
> Phil
>
> On Jul 28, 2014, at 17:00, Thomas Broyer <t.broyer@gmail.com 
> <mailto:t.broyer@gmail.com>> wrote:
>
>> Yes. This spec is of special interest to the platform we're building 
>> for http://www.oasis-eu.org/
>>
>>
>> On Mon, Jul 28, 2014 at 7:33 PM, Hannes Tschofenig 
>> <hannes.tschofenig@gmx.net <mailto:hannes.tschofenig@gmx.net>> wrote:
>>
>>     Hi all,
>>
>>     during the IETF #90 OAuth WG meeting, there was strong consensus in
>>     adopting the "OAuth Token Introspection"
>>     (draft-richer-oauth-introspection-06.txt) specification as an
>>     OAuth WG
>>     work item.
>>
>>     We would now like to verify the outcome of this call for adoption
>>     on the
>>     OAuth WG mailing list. Here is the link to the document:
>>     http://datatracker.ietf.org/doc/draft-richer-oauth-introspection/
>>
>>     If you did not hum at the IETF 90 OAuth WG meeting, and have an
>>     opinion
>>     as to the suitability of adopting this document as a WG work item,
>>     please send mail to the OAuth WG list indicating your opinion
>>     (Yes/No).
>>
>>     The confirmation call for adoption will last until August 10,
>>     2014.  If
>>     you have issues/edits/comments on the document, please send these
>>     comments along to the list in your response to this Call for
>>     Adoption.
>>
>>     Ciao
>>     Hannes & Derek
>>
>>
>>     _______________________________________________
>>     OAuth mailing list
>>     OAuth@ietf.org <mailto:OAuth@ietf.org>
>>     https://www.ietf.org/mailman/listinfo/oauth
>>
>>
>>
>>
>> -- 
>> Thomas Broyer
>> /t?.ma.b?wa.je/ <http://xn--nna.ma.xn--bwa-xxb.je/>
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org <mailto:OAuth@ietf.org>
>> https://www.ietf.org/mailman/listinfo/oauth
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth