[OAUTH-WG] Re: Token Status List Shepherd Write-up - Implementations

[Paul Bastian <[e-mail]>]

Hi,

Bundesdruckerei implemented Status List for the German EUDI Wallet 
Challenge "FUNKE", so did several other of the Wallet participants.

Best, Paul

On 6/2/25 17:13, Michael Schwartz wrote:
> Christian,
>
> We implemented Session Status List in Janssen Auth Server: 
> https://docs.jans.io/head/janssen-server/auth-server/endpoints/session-status-list/ 
>
>
> Also, we have a PR for Status List token validation in the Cedarling 
> PDP which is almost done: 
> https://github.com/JanssenProject/jans/pull/11520
>
> - Mike
>
> --------------------------------------
> Michael Schwartz
> Gluu
> Founder/CEO
> [e-mail]
> https://www.linkedin.com/in/nynymike
>
> On Mon, Jun 2, 2025 at 9:37 AM <[e-mail]> wrote:
>
>     Send OAuth mailing list submissions to
>     [e-mail]
>
>     To subscribe or unsubscribe via email, send a message with subject or
>     body 'help' to
>     [e-mail]
>
>     You can reach the person managing the list at
>     [e-mail]
>
>     When replying, please edit your Subject line so it is more specific
>     than "Re: Contents of OAuth digest..."
>
>     Today's Topics:
>
>        1. Re: Token Status List Shepherd Write-up - Implementations
>           (Christian Bormann)
>        2. Re: OAuth 2.1 Draft version 12 expired 19.05.2025
>           (Antic Kristian (C/CYG-GE))
>
>
>     ----------------------------------------------------------------------
>
>     Message: 1
>     Date: Mon, 2 Jun 2025 15:02:18 +0200
>     From: Christian Bormann <[e-mail]>
>     Subject: [OAUTH-WG] Re: Token Status List Shepherd Write-up -
>             Implementations
>     To: Rifaat Shekh-Yusef <[e-mail]>
>     Cc: oauth <[e-mail]>
>     Message-ID: <[e-mail]>
>     Content-Type: multipart/alternative;
>     boundary="Apple-Mail=_814837D8-8D6F-44E8-9B9B-0B27BDC45877"
>
>     Hi Rifaat,
>
>     We have a small list of open source implementations that we are
>     aware of and which agreed to being added to our repository:
>     https://github.com/oauth-wg/draft-ietf-oauth-status-list?tab=readme-ov-file#implementations-open-source
>
>     Regards,
>     Christian
>
>     > On 1. Jun 2025, at 14:04, Rifaat Shekh-Yusef
>     <[e-mail]> wrote:
>     >
>     > All,
>     >
>     > As part of the shepherd write-up for the Token Status List
>     document,
>     > we are looking for information about implementations of this draft.
>     >
>     > https://datatracker.ietf.org/doc/draft-ietf-oauth-status-list/
>     >
>     > Please, reply to this email, on the mailing list, with any
>     implementations that you are aware of to support this document.
>     >
>     > Regards,
>     > Rifaat
>     > _______________________________________________
>     > OAuth mailing list -- [e-mail]
>     > To unsubscribe send an email to [e-mail]
>
>     -------------- next part --------------
>     A message part incompatible with plain text digests has been
>     removed ...
>     Name: not available
>     Type: text/html
>     Size: 1492 bytes
>     Desc: not available
>
>     ------------------------------
>
>     Message: 2
>     Date: Mon, 2 Jun 2025 14:36:48 +0000
>     From: "Antic Kristian (C/CYG-GE)" <[e-mail]>
>     Subject: [OAUTH-WG] Re: OAuth 2.1 Draft version 12 expired 19.05.2025
>     To: Aaron Parecki <aaron=[e-mail]>, Rifaat
>             Shekh-Yusef      <[e-mail]>
>     Cc: "[e-mail]" <[e-mail]>
>     Message-ID: <[e-mail]
>     PRD10.PROD.OUTLOOK.COM <http://PRD10.PROD.OUTLOOK.COM>>
>     Content-Type: multipart/alternative; boundary="_000_DB9PR10MB80762E
>             CF2748CA29098F2569A162ADB9PR10MB8076EURP_"
>
>     Hi,
>
>     thank you both for your quick reply and Aaron for the updated
>     draft version
>     (https://datatracker.ietf.org/doc/html/draft-ietf-oauth-v2-1-13)
>
>     Mit freundlichen Grüßen / Best regards
>
>     Kristian Antic
>
>     Cyber Security - Governance Enterprise IT (C/CYG-GE)
>     Robert Bosch GmbH | Postfach 30 02 20 | 70442 Stuttgart | GERMANY
>     | www.bosch.com <http://www.bosch.com><http://www.bosch.com/>
>     [e-mail]<mailto:[e-mail]>
>
>     Sitz: Stuttgart, Registergericht: Amtsgericht Stuttgart, HRB 14000;
>     Aufsichtsratsvorsitzender: Prof. Dr. Stefan Asenkerschbaumer;
>     Geschäftsführung: Dr. Stefan Hartung, Dr. Christian Fischer, Dr.
>     Markus Forschner,
>     Stefan Grosch, Dr. Markus Heyn, Dr. Frank Meyer, Katja von Raven,
>     Dr. Tanja Rückert
>
>     From: Aaron Parecki <aaron=[e-mail]>
>     Sent: Wednesday, May 28, 2025 4:07 PM
>     To: Rifaat Shekh-Yusef <[e-mail]>
>     Cc: Antic Kristian (C/CYG-GE) <[e-mail]>;
>     [e-mail]
>     Subject: Re: [OAUTH-WG] Re: OAuth 2.1 Draft version 12 expired
>     19.05.2025
>
>     I've been working on related documents, mainly the OAuth for
>     Browser Apps BCP, and haven't come back around to this one in a while.
>
>     I just published an update that fixes some references including
>     updating the Security BCP references to RFC 9700, so it shows as
>     an active draft again.
>
>     Aaron
>
>
>     On Fri, May 23, 2025 at 4:09 AM Rifaat Shekh-Yusef
>     <[e-mail]<mailto:[e-mail]>> wrote:
>     Hi Kristian,
>
>     No, this does not mean that the document is near finalization.
>     This just means that the authors did not have a chance to work on
>     the document.
>
>     Regards,
>      Rifaat
>
>
>
>     On Fri, May 23, 2025 at 5:02 AM Antic Kristian (C/CYG-GE)
>     <Kristian.Antic=[e-mail]<mailto:[e-mail]>>
>     wrote:
>     Dear OAuth Working Group,
>
>     I have noticed that the latest draft
>     (draft-ietf-oauth-v2-1-12<https://datatracker.ietf.org/doc/html/draft-ietf-oauth-v2-1-12>)
>     for OAuth 2.1 has expired on May 19, 2024.
>     I would like to inquire whether this indicates that the
>     specification is nearing finalization, or if work is underway on a
>     new draft version.
>     Thank you for your time and clarification.
>
>     Mit freundlichen Grüßen / Best regards
>
>     Kristian Antic
>
>     Cyber Security - Governance Enterprise IT (C/CYG-GE)
>     Robert Bosch GmbH | Postfach 30 02 20 | 70442 Stuttgart | GERMANY
>     | www.bosch.com <http://www.bosch.com><http://www.bosch.com/>
>     [e-mail]<mailto:[e-mail]>
>
>     Sitz: Stuttgart, Registergericht: Amtsgericht Stuttgart, HRB 14000;
>     Aufsichtsratsvorsitzender: Prof. Dr. Stefan Asenkerschbaumer;
>     Geschäftsführung: Dr. Stefan Hartung, Dr. Christian Fischer, Dr.
>     Markus Forschner,
>     Stefan Grosch, Dr. Markus Heyn, Dr. Frank Meyer, Katja von Raven,
>     Dr. Tanja Rückert
>
>     _______________________________________________
>     OAuth mailing list -- [e-mail]<mailto:[e-mail]>
>     To unsubscribe send an email to
>     [e-mail]<mailto:[e-mail]>
>     _______________________________________________
>     OAuth mailing list -- [e-mail]<mailto:[e-mail]>
>     To unsubscribe send an email to
>     [e-mail]<mailto:[e-mail]>
>     -------------- next part --------------
>     A message part incompatible with plain text digests has been
>     removed ...
>     Name: not available
>     Type: text/html
>     Size: 9718 bytes
>     Desc: not available
>
>     ------------------------------
>
>     Subject: Digest Footer
>
>     _______________________________________________
>     OAuth mailing list -- [e-mail]
>     To unsubscribe send an email to [e-mail]
>
>
>     ------------------------------
>
>     End of OAuth Digest, Vol 200, Issue 2
>     *************************************
>
>
>
> ------------------------------------------------------------------------
> *CONFIDENTIALITY NOTICE*
> This message may contain confidential or legally privileged information.
> If you are not the intended recipient, please immediately advise the 
> sender by reply e-mail that you received this message, and delete this 
> e-mail from your system.
> Thank you for your cooperation
>
> _______________________________________________
> OAuth mailing list [e-mail]
> To unsubscribe send an email [e-mail]