Re: [OAUTH-WG] Shepherd writeup for the JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens -- Information about Implementations

Filip Skokan <panva.ip@gmail.com> Thu, 17 September 2020 14:00 UTC

Return-Path: <panva.ip@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 623263A02DC for <oauth@ietfa.amsl.com>; Thu, 17 Sep 2020 07:00:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.095
X-Spam-Level:
X-Spam-Status: No, score=-2.095 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xMx7KbDaPwXE for <oauth@ietfa.amsl.com>; Thu, 17 Sep 2020 07:00:41 -0700 (PDT)
Received: from mail-ed1-x529.google.com (mail-ed1-x529.google.com [IPv6:2a00:1450:4864:20::529]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9B3843A0100 for <oauth@ietf.org>; Thu, 17 Sep 2020 07:00:41 -0700 (PDT)
Received: by mail-ed1-x529.google.com with SMTP id ay8so2597380edb.8 for <oauth@ietf.org>; Thu, 17 Sep 2020 07:00:41 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=content-transfer-encoding:from:mime-version:subject:date:message-id :references:cc:in-reply-to:to; bh=k/KlgoBIMIdqtOJgPeyr9CskcA7QTqWrbFthr0ij1f4=; b=MeOHwQH6h5p8s+W1BP+dPbC2aDiEBZkOJlzSjsYqMP7X4jT0mlTniP8aHPS4OBcdN3 wAmiLEBF7ytTK9C12ylFPTQpxTLuD2J8qSR14tT7pA1WWxvIuI5J95KhOZ3hLVcBTTRI BqqEBQsi5PkTKwou8B+dmXR6NQz49wjZu4jfTVkotc81Ov0y5zPiXsYdPxEuT+OR/2gt oncAvHnPn15nElLxPSO996WON7uZ0HT0XSiwL+myQY4cVgcjD9HvH1q3PDQjiR/esqf9 lqpfdQQBA3tahpZoaZ3hWVnrq/H84O33okGa1xj3Ds/DqE12lKTvLNhR4618k4/+2EPm TgTg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:content-transfer-encoding:from:mime-version :subject:date:message-id:references:cc:in-reply-to:to; bh=k/KlgoBIMIdqtOJgPeyr9CskcA7QTqWrbFthr0ij1f4=; b=YShFr9kaOOb+PUH4dGwSn6b+xIgJVbMA0GUIvrYhrTKH6JAYEmK4VKjWxLujDP1Uuu HYLoGXBOVGFpMy2NzqNmgjGXPGeTp0neYFYQ+RL578OtXumpaIHnR/jRx5RGg21A5uJQ 1aEv/wzjSS4m990ZehRh44xUhGEgUF4z63/RTF1f/FRIH2k7vsgo+EP50vSYQ3QQCmhT nV9UPPxH0AyLfNTkwax9INAGFrjzBsoxL1sdDgDMWPqF4ZiT6IIdi51RCj27obx4scgr nHYRONhDmCJLJziZO3Q6FCWxigmOSA2+1T30LALPVxz76Uuy8+VwslAf+PX97xfo2YPm AbcQ==
X-Gm-Message-State: AOAM532gAVPJhHR9AqmRO8Er/4+Jp93OfexnbTgfnB3ieEa1vS4S159I qMdnPKZedOYw0tbMn6wa6SgDr93w1YlY
X-Google-Smtp-Source: ABdhPJwlHUO0GimMIAxwVgZiKMSUf1asS9tX2gQpOqKe0CCND4hfz9VRSoIYwT5ZsK/HIqQB0tGEqQ==
X-Received: by 2002:a05:6402:1acf:: with SMTP id ba15mr31068122edb.305.1600351239684; Thu, 17 Sep 2020 07:00:39 -0700 (PDT)
Received: from localhost.localdomain (173.c3.airnet.cz. [94.74.199.173]) by smtp.gmail.com with ESMTPSA id k10sm16588063edo.36.2020.09.17.07.00.38 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Thu, 17 Sep 2020 07:00:38 -0700 (PDT)
Content-Type: multipart/alternative; boundary="Apple-Mail-5029C982-CAA9-4FE3-AD53-06E31A1F4796"
Content-Transfer-Encoding: 7bit
From: Filip Skokan <panva.ip@gmail.com>
Mime-Version: 1.0 (1.0)
Date: Thu, 17 Sep 2020 16:00:37 +0200
Message-Id: <575C37C8-B6F1-44B5-93B1-9B325EA16390@gmail.com>
References: <AM0PR08MB3716EA319E1BF88F3A0880C8FA3E0@AM0PR08MB3716.eurprd08.prod.outlook.com>
Cc: oauth@ietf.org, Vittorio Bertocci <vittorio.bertocci@auth0.com>
In-Reply-To: <AM0PR08MB3716EA319E1BF88F3A0880C8FA3E0@AM0PR08MB3716.eurprd08.prod.outlook.com>
To: Hannes Tschofenig <Hannes.Tschofenig@arm.com>
X-Mailer: iPhone Mail (18A373)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/XSXeE-ijrQL2QD_yfG6jM1R1UUU>
Subject: Re: [OAUTH-WG] Shepherd writeup for the JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens -- Information about Implementations
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 17 Sep 2020 14:00:43 -0000

Hi Hannes, 

Node.js project oidc-provider (https://github.com/panva/node-oidc-provider) has an option to issue Access Tokens conform to this profile. 

Best, 
Filip

Odesláno z iPhonu

> 17. 9. 2020 v 14:56, Hannes Tschofenig <Hannes.Tschofenig@arm.com>:
> 
> Hi Vittorio, Hi all,
> 
> I am working on the shepherd writeup for <draft-ietf-oauth-access-token-jwt> and you can find the latest version here:
> https://github.com/hannestschofenig/tschofenig-ids/blob/master/shepherd-writeups/Writeup_OAuth_JWT-Profile-for-AccessTokens.txt
> 
> I am in need for information about implementations that are conformant to this specification. This information would be listed in this write-up, as background information to the IESG.
> 
> Ciao
> Hannes
> 
> IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.
> 
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth