Return-Path: X-Original-To: oauth@ietfa.amsl.com Delivered-To: oauth@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3D6121201AA for ; Mon, 4 Nov 2019 08:48:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hjymPFpZvl4J for ; Mon, 4 Nov 2019 08:48:19 -0800 (PST) Received: from mail-wr1-x432.google.com (mail-wr1-x432.google.com [IPv6:2a00:1450:4864:20::432]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4305B120100 for ; Mon, 4 Nov 2019 08:48:19 -0800 (PST) Received: by mail-wr1-x432.google.com with SMTP id s1so17955189wro.0 for ; Mon, 04 Nov 2019 08:48:19 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=from:mime-version:subject:message-id:references:to:date; bh=+uhFHOzjVssnIXNjPW70uM/ZitXZg3StH2jYicsdDf0=; b=WJ9Ut3up5iPVGPoo/GFeojvnhM2hNC3zaHuibB41U8EISKZctNgjRoyRIlPeWiH9HL igYWhpCqURsRFw3l8vnQbsYj9JDIkKCrr/hoMj3mJvmdKDUd0raaZeegFTdiI94XBIiI NIDLR2zgM+bwBXWQZ7PgCsjRo6mkmAE5M2FbcHsUmkEElm5I4B+/j5CGUvCkbWa/9zfQ IOEdJulk4OKeKi8DpmizYGGfoODvF2P4c+a+5O54w5rPXcWGCcafA2pu+BJY/q4WN83e 8I8jCKnqCdgwX7Cmq05htjof1jtgaJUijWgxOmeUCWoyA0z3upkA7bShRdCv4L/JtZFC 5wFQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:mime-version:subject:message-id:references :to:date; bh=+uhFHOzjVssnIXNjPW70uM/ZitXZg3StH2jYicsdDf0=; b=mcjC8He1kxpYoHTCkZEhR1R1iygLnAmIWNmJRqTUGvTmNEXYIaoRkCAET+nurnFT5C vnaTIPAGKkSWDYVcwzTVD/gTZMRvHq+tcBu4VoTHppN6rWlf/EBPapzy1S+//0xezyU6 smQIm6YBKixT7kmhgBVH+hmGSOANdUREnenTdOB/t7a3QV4linjdPoq+PCEoz4u2TVt5 8DmiwGyYUmAnx38cadPwWloQbNy00DlNIrTFkajEh4DQmTYxv9ZUhUwD4s7g3C9dSCwg TLhxvY35jfil0/1YVaYA/8ZDZoBS5GwPfMuCkgfVnhYTxaE9JkmLTN3WkxqcW19SR3Oy PMkw== X-Gm-Message-State: APjAAAXpYnvTtguap0nmpORK3VS1yjypCZFH0lQZnoGu/pK/rcR3+eCa H9YTf42H2wOj8+DJcFtnI6G2fmyzVNwSfA== X-Google-Smtp-Source: APXvYqzID+zLGjXjaP4TbVMIJcnqeI+ugYsXdQSxDgN3bXQu9q1zBvOG0YlPIbNJ63ecjcZVjGQ12A== X-Received: by 2002:a5d:5091:: with SMTP id a17mr22862560wrt.249.1572886097410; Mon, 04 Nov 2019 08:48:17 -0800 (PST) Received: from [192.168.71.123] (p549EE7F4.dip0.t-ipconnect.de. [84.158.231.244]) by smtp.gmail.com with ESMTPSA id 76sm28601531wma.0.2019.11.04.08.48.16 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 04 Nov 2019 08:48:16 -0800 (PST) From: Torsten Lodderstedt Content-Type: multipart/signed; boundary="Apple-Mail=_795C6E75-20F5-42F1-B5DA-30CCC13EFCC8"; protocol="application/pkcs7-signature"; micalg=sha-256 Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\)) Message-Id: <6FC2E5A2-5399-46A5-8DF1-988D6E1942DC@lodderstedt.net> References: <157288578137.16651.11095431477669936196.idtracker@ietfa.amsl.com> To: oauth Date: Mon, 4 Nov 2019 17:48:15 +0100 X-Mailer: Apple Mail (2.3601.0.10) Archived-At: Subject: [OAUTH-WG] Fwd: New Version Notification for draft-lodderstedt-oauth-rar-03.txt X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Nov 2019 16:48:22 -0000 --Apple-Mail=_795C6E75-20F5-42F1-B5DA-30CCC13EFCC8 Content-Type: multipart/alternative; boundary="Apple-Mail=_DEB7000B-C24A-4789-9B87-2F02F8AE5428" --Apple-Mail=_DEB7000B-C24A-4789-9B87-2F02F8AE5428 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi all, a new (significantly enhanced) revision of draft-lodderstedt-oauth-rar = was just published. Here is the list of changes: =E2=80=A2 Reworked examples to illustrate privacy preserving use = of authorization_details =E2=80=A2 Added text on audience restriction =E2=80=A2 Added description of relationship between scope and = authorization_details =E2=80=A2 Added text on token request & response and = authorization_details =E2=80=A2 Added text on how authorization details are conveyed = to RSs by JWTs or token endpoint response =E2=80=A2 Added description of relationship between claims and = authorization_details =E2=80=A2 Added more example from different sectors =E2=80=A2 Clarified string comparison to be byte-exact without = collation Thanks a lot for all contributions and the review feedback so far. I = will present this draft in Singapore and would appreciate if the WG = would consider this draft for adoption.=20 best regards, Torsten.=20 > Begin forwarded message: >=20 > From: internet-drafts@ietf.org > Subject: New Version Notification for = draft-lodderstedt-oauth-rar-03.txt > Date: 4. November 2019 at 17:43:01 CET > To: "Justin Richer" , "Torsten Lodderstedt" = , "Brian Campbell" >=20 >=20 > A new version of I-D, draft-lodderstedt-oauth-rar-03.txt > has been successfully submitted by Torsten Lodderstedt and posted to = the > IETF repository. >=20 > Name: draft-lodderstedt-oauth-rar > Revision: 03 > Title: OAuth 2.0 Rich Authorization Requests > Document date: 2019-11-03 > Group: Individual Submission > Pages: 30 > URL: = https://www.ietf.org/internet-drafts/draft-lodderstedt-oauth-rar-03.txt > Status: = https://datatracker.ietf.org/doc/draft-lodderstedt-oauth-rar/ > Htmlized: = https://tools.ietf.org/html/draft-lodderstedt-oauth-rar-03 > Htmlized: = https://datatracker.ietf.org/doc/html/draft-lodderstedt-oauth-rar > Diff: = https://www.ietf.org/rfcdiff?url2=3Ddraft-lodderstedt-oauth-rar-03 >=20 > Abstract: > This document specifies a new parameter "authorization_details" that > is used to carry fine grained authorization data in the OAuth > authorization request. >=20 >=20 >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > The IETF Secretariat >=20 --Apple-Mail=_DEB7000B-C24A-4789-9B87-2F02F8AE5428 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hi = all,

a new = (significantly enhanced) revision of draft-lodderstedt-oauth-rar was = just published. Here is the list of changes:

=E2=80=A2 = Reworked examples to illustrate privacy preserving use = of authorization_details
=E2=80=A2 = Added text on audience restriction
= =E2=80=A2 Added description of relationship = between scope and authorization_details
=E2=80=A2 Added text on token = request & response and authorization_details
=E2=80=A2 Added text on how = authorization details are conveyed to RSs by JWTs or token endpoint = response
=E2=80=A2 = Added description of relationship = between claims and authorization_details
=E2=80=A2 Added more example from = different sectors
=E2=80=A2 = Clarified string comparison to be byte-exact without collation

Thanks a lot for all = contributions and the review feedback so far. I will present this draft = in Singapore and would appreciate if the WG would consider this draft = for adoption. 

best regards,
Torsten. 
Begin = forwarded message:

From: = internet-drafts@ietf.org
Subject: = New Version = Notification for draft-lodderstedt-oauth-rar-03.txt
Date: = 4. November 2019 at 17:43:01 = CET
To: = "Justin Richer" <ietf@justin.richer.org>, "Torsten Lodderstedt" <torsten@lodderstedt.net>, "Brian Campbell" <bcampbell@pingidentity.com>

A new version of I-D, draft-lodderstedt-oauth-rar-03.txt
has been successfully submitted by Torsten Lodderstedt and = posted to the
IETF repository.

Name: = = draft-lodderstedt-oauth-rar
Revision: 03
Title:= = OAuth 2.0 Rich Authorization Requests
Document = date: = 2019-11-03
Group: Individual Submission
Pages:= = 30
URL: =            https://www.ietf.org/internet-drafts/draft-lodderstedt-oauth-ra= r-03.txt
Status: =         https://datatracker.ietf.org/doc/draft-lodderstedt-oauth-rar/
Htmlized:       https://tools.ietf.org/html/draft-lodderstedt-oauth-rar-03<= br class=3D"">Htmlized:       https://datatracker.ietf.org/doc/html/draft-lodderstedt-oauth-r= ar
Diff: =           https://www.ietf.org/rfcdiff?url2=3Ddraft-lodderstedt-oauth-rar= -03

Abstract:
=   This document specifies a new parameter = "authorization_details" that
  is used to carry = fine grained authorization data in the OAuth
=   authorization request.




Please note that it may take a = couple of minutes from the time of submission
until the = htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat


= --Apple-Mail=_DEB7000B-C24A-4789-9B87-2F02F8AE5428-- --Apple-Mail=_795C6E75-20F5-42F1-B5DA-30CCC13EFCC8 Content-Disposition: attachment; filename=smime.p7s Content-Type: application/pkcs7-signature; name=smime.p7s Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCC0ow ggUyMIIEGqADAgECAhEAh3cjdwfbVS49xtpMKQd5tjANBgkqhkiG9w0BAQsFADCBljELMAkGA1UE BhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEYMBYG A1UEChMPU2VjdGlnbyBMaW1pdGVkMT4wPAYDVQQDEzVTZWN0aWdvIFJTQSBDbGllbnQgQXV0aGVu dGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQTAeFw0xOTAxMzAwMDAwMDBaFw0yMDAxMzAyMzU5 NTlaMCgxJjAkBgkqhkiG9w0BCQEWF3RvcnN0ZW5AbG9kZGVyc3RlZHQubmV0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iT7e+ZazS5uGQ2/oV6rKb+dLiC1cbVCWN1TEV1XemJP68/I 91+YUtc87N8M46QgGHN25FeM8xaWL6Q83aArs/nnuYx26+x0Em5Z8cqcAe+i1JLbvxt5j47h+5ii ZErQld2GCf7EsW5YO+UoNws9ZMkcOHp77qSUuva0mDxitDpsMdlVIbYTkOIW2/x7NinUBBSvpO0b xlejSGukCX73pTUWPBK3kznd3wqg7SaiqZH+1g/1cQxMD8Wk8S1QPO3AB2xA7hES4EjWFZ7a9HhX 5VMRyJlsEDb1KJAot7cypJcfDhCJwG8De5hSEsW5kEWL0h+AOFXcB+JQzLW0sdSVxwIDAQABo4IB 5jCCAeIwHwYDVR0jBBgwFoAUCcDy/AvalNtf/ivfqJlCz8ngrQAwHQYDVR0OBBYEFBnmpsoJu2zU GrbmQoBZG6uxqdNRMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMCAGA1UdJQQZMBcGCCsG AQUFBwMEBgsrBgEEAbIxAQMFAjARBglghkgBhvhCAQEEBAMCBSAwQAYDVR0gBDkwNzA1BgwrBgEE AbIxAQIBAQEwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwWgYDVR0fBFMw UTBPoE2gS4ZJaHR0cDovL2NybC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBQ2xpZW50QXV0aGVudGlj YXRpb25hbmRTZWN1cmVFbWFpbENBLmNybDCBigYIKwYBBQUHAQEEfjB8MFUGCCsGAQUFBzAChklo dHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3RpZ29SU0FDbGllbnRBdXRoZW50aWNhdGlvbmFuZFNl Y3VyZUVtYWlsQ0EuY3J0MCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTAiBgNV HREEGzAZgRd0b3JzdGVuQGxvZGRlcnN0ZWR0Lm5ldDANBgkqhkiG9w0BAQsFAAOCAQEAKEl922ls OY5xPqRLJUKLCshBzoNcJ6UDXI4CwCClc4E3yIDQg09zpK0UdrFW0cU8qFc7iXRixKdU361AADG+ SB/N9ttU40JB7HgJYLhHYijKjXwobUGohyhZRv00PvAS6qV8Xevj2OGZ1V/w3VPJxEyYPpSCFJ0g qUut0Nt6qse67hS5+BZsJp5d+v/Ozo9UGjLa658ZovxG7/CsKZXF6AQe5fNPhpWAfyVfnTHwQpqm 5jQYPX3fB3k3JQv/IuB2CIENxgQoYpfXg37sSbcdkeWQu4ouiRlTwTfLDI2pfuxRQLJzoCxIYkxg jlq6XtpvolvwKfJpeg44hus5k11RPDCCBhAwggP4oAMCAQICEE2ULBDUO+CUCcWBLTorBk8wDQYJ KoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQH EwtKZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYDVQQDEyVV U0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTE4MTEwMjAwMDAwMFoXDTMw MTIzMTIzNTk1OVowgZYxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIx EDAOBgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE+MDwGA1UEAxM1U2Vj dGlnbyBSU0EgQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0EwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKPO2UCkH/3vlGuejWO+bakr8rEE6qGryCvb4mHCkq KtLNnFCBP22ULvOXqGfV9eNKjkypdR8i0yW2sxpepwRIm4rx20rno0JKuriIMpoqr03E5cWapdfb M3wccaNDZvZe/S/Uvk2TUxA8oDX3F5ZBykYQYVRR3SQ36gejH4v1pXWuN82IKPdsmTqQlo49ps+L bnTeef8hNfl7xZ8+cbDhW5nv0qGPVgGt/biTkR7WwtMewu2mIr06MbiJBEF2rpn9OVXH+EYB7PmH fpsEkzGp0cul3AhSROpPyx7d53Q97ANyH/yQc+jl9mXm7UHR5ymr+wM3/mwIbnYOz5BTk7kTAgMB AAGjggFkMIIBYDAfBgNVHSMEGDAWgBRTeb9aqitKz1SA4dibwJ3ysgNmyzAdBgNVHQ4EFgQUCcDy /AvalNtf/ivfqJlCz8ngrQAwDgYDVR0PAQH/BAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYD VR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMBEGA1UdIAQKMAgwBgYEVR0gADBQBgNVHR8ESTBH MEWgQ6BBhj9odHRwOi8vY3JsLnVzZXJ0cnVzdC5jb20vVVNFUlRydXN0UlNBQ2VydGlmaWNhdGlv bkF1dGhvcml0eS5jcmwwdgYIKwYBBQUHAQEEajBoMD8GCCsGAQUFBzAChjNodHRwOi8vY3J0LnVz ZXJ0cnVzdC5jb20vVVNFUlRydXN0UlNBQWRkVHJ1c3RDQS5jcnQwJQYIKwYBBQUHMAGGGWh0dHA6 Ly9vY3NwLnVzZXJ0cnVzdC5jb20wDQYJKoZIhvcNAQEMBQADggIBAEFEdQCrOcIV9d6OlW0ycWiM AN0X13ocEDiQyOOxvRcxkfO244K0oX7GzCGHYaqRbklCszzNWVT4DZU/vYrLaeVEDUbCYg+Ci7vh Nn9dNqscbzN0xKBoOuRVjPPWDechU70geT3pXCxpwi8EXwl+oiz7xpYfY99JSs3E/piztTSxljHi tcPr5yoWr9lbkFR8KU3+uGTZ11BfKfuSSaRrZFBv133SeY0d2AqvB9Dj2ZDaFZA0OQkkhfAqNgDp VRH99lQV4JSKx0N7/QAEtMj6OF5dRXV6hhXuU3A0Eql4d0247oBpxvnfcmV95QfG8HP059hZSJe7 T2wwC+IzXVDQO4xnnvrQJ07ZWemxc/grFpgiG+o+pQxapF1bKftysi02Rl6uhdp5wbTeLeYzt2SI 9oKSChwGDQQFixtkNnxuwbdrTwvASwvViDPdIGzIQJrTBqriE5/9nzkXbDZmld8/7DyriJ/A73RI ZllX4dH8mHqsRpU8NEX8IQZWpHWGK5A5nVgvl7MxNfRlIvCvKZQTSnCL8oNqJgHXm6zCB4gBwDon M8V/2kuQAUVazVA3I376eIWGwzjuqh3H88v7mNHzubLHm5h0ERCSQNz6UoHVZy3q5xeqbYSaxpDQ z3lCNObL6sNaOQNh3DcyzqZJYTcGfuLlmC3AIteAAh7lbybJszYnMYIDxzCCA8MCAQEwgawwgZYx CzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZv cmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE+MDwGA1UEAxM1U2VjdGlnbyBSU0EgQ2xpZW50 IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0ECEQCHdyN3B9tVLj3G2kwpB3m2MA0G CWCGSAFlAwQCAQUAoIIB6zAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEP Fw0xOTExMDQxNjQ4MTVaMC8GCSqGSIb3DQEJBDEiBCBoaIS3oKTR+ijWmMthWHAE+hVHhSnyn7QA ww0vVXRrBTCBvQYJKwYBBAGCNxAEMYGvMIGsMIGWMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3Jl YXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRgwFgYDVQQKEw9TZWN0aWdvIExpbWl0 ZWQxPjA8BgNVBAMTNVNlY3RpZ28gUlNBIENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJl IEVtYWlsIENBAhEAh3cjdwfbVS49xtpMKQd5tjCBvwYLKoZIhvcNAQkQAgsxga+ggawwgZYxCzAJ BgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQx GDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE+MDwGA1UEAxM1U2VjdGlnbyBSU0EgQ2xpZW50IEF1 dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0ECEQCHdyN3B9tVLj3G2kwpB3m2MA0GCSqG SIb3DQEBAQUABIIBAK0rLyprzeBRbdyMHqoNsTB7mo5ypyldIb0chS9Lx3uVY0JhdgXBmMo+PHRo 7HAJdWlqaRUM5+DxGt15+9pp6YdzhqsHmHE6nzpHFrcMF4IqvzeiY+6WMuPhteV37SpofynjWw3s M1B3fjGN8vLhbiJ746zyzkTdpv+no1/fZesCAIhhHX/LyebMb7nyYxXUi+9RFifcTEIYFiw4zAiC kVzM1R35/URQyY9CXo84A/or2oDQGdyhBqnCIwFjvPB/UliD6nAkOxZfAjQwed+iuek+P6DJWc9+ Gg8ok8nZIHagba1K6cG+aJvKoxmTsdT2HxtniuzIZvv3fFi0BnpLn6QAAAAAAAA= --Apple-Mail=_795C6E75-20F5-42F1-B5DA-30CCC13EFCC8--