[OAUTH-WG] draft-chen-oauth-agent-authz-use-cases-01

Meiling Chen <chenmeiling@chinamobile.com> Thu, 13 August 2026 09:56 UTC

Return-Path: <chenmeiling@chinamobile.com>
X-Original-To: oauth@mail2.ietf.org
Delivered-To: oauth@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id D923A1290F196 for <oauth@mail2.ietf.org>; Thu, 13 Aug 2026 02:56:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1786615018; bh=UJS73QYUN3fBcDx4VP6344Zq/cAfxtRjBCUp5GXkzZM=; h=Date:From:To:Cc:Subject; b=UOWsnzrIL1SIG0/uzrwupm91q6zQ96Asn9/MSgpmNYIkzbdcMr0y6YM08RE2E7+N7 awcR53ebZwai6ztFXhZlRgxWWc4pxIeOBODloWKZzJfEvwYto8EItV952MXDyB8+U0 D6j2oDt8g4Sp3qnnspIQBBW7xzMKz/du6t1v8qhU=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.386
X-Spam-Level:
X-Spam-Status: No, score=-2.386 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, HTML_FONT_FACE_BAD=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=chinamobile.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id p9SQo1ASg-D6 for <oauth@mail2.ietf.org>; Thu, 13 Aug 2026 02:56:56 -0700 (PDT)
Received: from cmccmta6.chinamobile.com (cmccmta6.chinamobile.com [111.22.67.139]) by mail2.ietf.org (Postfix) with ESMTP id 17DF31290F18B for <oauth@ietf.org>; Thu, 13 Aug 2026 02:56:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chinamobile.com; s=default; l=0; h=from:subject:message-id:to:cc:mime-version; bh=47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=; b=oirLkuzdQl8Fmvo5wZVjct6MnuOBbCDZTXfY3vNaspO3ryf+hkjKOcv8eDb3+Y+Lum8xGF/rZxBVL DRFK3bm1HQyvstXgivBMl+UZnXGAsoNm8LTTDtkzkNIayqDX27jZxg6vVwzuRdTG+b02I8Oep7GF/Q FuytxDQxfv2rO6T8=
X-RM-TagInfo: emlType=0
X-RM-SPAM-FLAG: 00000000
Received: from mail.dlp.master (unknown[10.188.0.87]) by rmmx-syy-dmz-app09-12009 (RichMail) with SMTP id 2ee96a7d94df3c2-073f2; Thu, 13 Aug 2026 17:56:48 +0800 (CST)
X-RM-TRANSID: 2ee96a7d94df3c2-073f2
Received: from wxh.mailtest (localhost [127.0.0.1]) by mail.dlp.master (Postfix) with ESMTP id 2BA4015A02D7 for <oauth@ietf.org>; Thu, 13 Aug 2026 17:56:48 +0800 (CST)
Received: from spf.mail.chinamobile.com (unknown [10.230.70.214]) by mail.dlp.master (Postfix) with ESMTP id 7867B15A02FE for <oauth@ietf.org>; Thu, 13 Aug 2026 17:56:31 +0800 (CST)
X-RM-TagInfo: emlType=0
X-RM-SPAM-FLAG: 00000000
Received: from DESKTOP-U9UKLCC (unknown[223.104.41.4]) by rmsmtp-syy-appsvr01-12001 (RichMail) with SMTP id 2ee16a7d94ce29c-a645a; Thu, 13 Aug 2026 17:56:31 +0800 (CST)
X-RM-TRANSID: 2ee16a7d94ce29c-a645a
Date: Thu, 13 Aug 2026 17:56:30 +0800
From: Meiling Chen <chenmeiling@chinamobile.com>
To: chenmeiling <chenmeiling@chinamobile.com>, chenjia <chenjia@chinamobile.com>, yaojk <yaojk@cnnic.cn>, jiangyuning2 <jiangyuning2@h-partners.com>, liuchunchi <liuchunchi@huawei.com>
X-Priority: 3
X-GUID: F83BA98C-D66D-4E8F-A487-305AD6EFEDD7
X-Has-Attach: no
X-Mailer: Foxmail 7.2.25.542[cn]
Mime-Version: 1.0
Message-ID: <202608131756296188747@chinamobile.com>
Content-Type: multipart/alternative; boundary="----=_001_NextPart022177055652_=----"
Message-ID-Hash: IJIX2YXIG6VNB77Q7XSSJADJI66ENHGZ
X-Message-ID-Hash: IJIX2YXIG6VNB77Q7XSSJADJI66ENHGZ
X-MailFrom: chenmeiling@chinamobile.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-oauth.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: oauth <oauth@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [OAUTH-WG] draft-chen-oauth-agent-authz-use-cases-01
List-Id: OAUTH WG <oauth.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/Pz-M14tYmp75YWPkv9MbDgis4Xk>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Owner: <mailto:oauth-owner@ietf.org>
List-Post: <mailto:oauth@ietf.org>
List-Subscribe: <mailto:oauth-join@ietf.org>
List-Unsubscribe: <mailto:oauth-leave@ietf.org>

Hi usecase co-authors,
I'm writing to ask for your help with a crucial quality check as we prepare for the -03 submission of our agent authorization draft.
Recently, we received some excellent and precise feedback from Morgan on Use Case 6 (UC6). He pointed out a significant inconsistency: a requirement had been added to the "Requirements" list, but its corresponding analysis was completely missing from the "Gap Analysis" section. This created a broken link for the reader and weakened the argument for that use case.
While I have already fixed the specific issue in UC6, this incident highlights a potential systemic risk in our document. As the draft has evolved and we've added or refined requirements, we may have inadvertently created similar inconsistencies in other use cases.
Call to Action:
To prevent this from happening again and to strengthen the overall quality of our draft, I am asking each of you to please review all use cases (or at least the ones you are most familiar with) with a specific focus on the following:
Please verify that for every single requirement listed in a use case, there is a corresponding and explicit entry or discussion in the What's Missing (The Gap) or  What Works (Partially) section for that same use case.
The goal is to ensure there are no "dangling requirements" where we state a need but fail to analyze why the existing landscape (the gap) makes it necessary.
Please try to complete your review by this Friday. If you find any discrepancies, please reply to this email thread or, even better, open an issue on our GitHub repository so we can track it formally.
Thanks for your help in ensuring the consistency and integrity of our work. This proactive check will make the document much stronger for the next round of community review.
Best regards,
Meiling


chenmeiling@chinamobile.com