IETF Logo Mail Archive

Re: [OAUTH-WG] draft-ietf-oauth-dyn-reg and bearer tokens

Tim Bray <twbray@google.com> Thu, 06 June 2013 06:25 UTC

Return-Path: <twbray@google.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3E8C021F8FDC for <oauth@ietfa.amsl.com>; Wed, 5 Jun 2013 23:25:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.678
X-Spam-Level:
X-Spam-Status: No, score=-0.678 tagged_above=-999 required=5 tests=[AWL=1.299, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, NO_RELAYS=-0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id v1bcJypxn6m6 for <oauth@ietfa.amsl.com>; Wed, 5 Jun 2013 23:25:53 -0700 (PDT)
Received: from mail-ie0-x22b.google.com (mail-ie0-x22b.google.com [IPv6:2607:f8b0:4001:c03::22b]) by ietfa.amsl.com (Postfix) with ESMTP id 9307321F8F61 for <oauth@ietf.org>; Wed, 5 Jun 2013 23:25:53 -0700 (PDT)
Received: by mail-ie0-f171.google.com with SMTP id s9so6130200iec.16 for <oauth@ietf.org>; Wed, 05 Jun 2013 23:25:53 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=vxwTIsNBbVdyvz3GLtcEVH076b21aood+BqcyCbOX+8=; b=XdYVINZRbIYjRvxMIry+a1O6pbC+JYkDAI5D4yl0aRPp5e/eVBFU9JUJoGXg0JD0gp DmciffZaaZP1+8m7vA5z/vxTwQbZXp6G0Of4v/koeIZMWPEaIt+dKDi8kVXhnCmXMZCV EK18+slevdvUBcTEPNIkHnXSxNkzsq9vrcP81bZ2tboW8G0IpmtO2YYA3nZzFkMc3T9/ VO1PeSxlv4hK0FI/M25H2SHZqNuzt36W6VFCo5lrJgwgBuiOvHgb7n7f4wQjqlaroTTj QlM04mdIV0ziw67SRSXD1DaBs/W6VkekBy7a1h6c1QeColrlzhPpy41v33kjSRf2XY2W kgJQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type:x-gm-message-state; bh=vxwTIsNBbVdyvz3GLtcEVH076b21aood+BqcyCbOX+8=; b=dkRh2lDT7ZLRZmkXuE1vCDeZCF9GFtrKfsmeQmUI3Y8W8dhQqZQR7W8pO3y5eWeECM /Ynx3CfA07VmVbkCGvCtLAz1edxwb3eOSAWVpfiuMnNwHpzgK7Sfnds2EEpHgAE1qoa1 jDNBFShYniMJCQEewEO5PEaJznGv7QWMnOfV5ff/yjROBuEMJRo3uCPBSvZ+1UJl4Drh hbHEeXx2/Oi6TRvMnhpekmfkMYV1p4cigv/iHyIz6k0x/C3O891Wf3nUSRP5w1acvm07 Iv0Did0hdJdj7mnp/qS28S85GiV1BRzwjkvDacWfh8AINMEl+C95s3JJsDO3oNVIDzRY 4DmQ==
X-Received: by 10.50.178.137 with SMTP id cy9mr4841709igc.16.1370499953101; Wed, 05 Jun 2013 23:25:53 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.64.23.103 with HTTP; Wed, 5 Jun 2013 23:25:22 -0700 (PDT)
In-Reply-To: <255B9BB34FB7D647A506DC292726F6E1151B105DA5@WSMSG3153V.srv.dir.telstra.com>
References: <20130524203638.25945.84709.idtracker@ietfa.amsl.com> <51A7ADAE.4070005@mitre.org> <62636DE9-80BD-4B83-817B-3E6622434FD0@oracle.com> <51A7C00B.6050409@mitre.org> <78BAEE23-FB66-4BA5-A1A5-5626D22AA014@oracle.com> <B33BFB58CCC8BE4998958016839DE27E08F97708@IMCMBX01.MITRE.ORG> <18C751E2-31B2-4C7F-BC9A-49F382F96673@oracle.com> <77A0DA5E-09CE-4A5E-9500-54A0842252FB@oracle.com> <F293690C-1E82-4350-80D4-2E2C0EF86E55@oracle.com> <51A8C0ED.6040607@mitre.org> <87E1F74D-9CCA-4330-82D6-AB3D9B8EF48D@oracle.com> <F319CA95-B5A8-4BD5-A8BA-F57BCBA6806B@oracle.com> <51A8E0BD.9090908@mitre.org> <521EB2A2-C786-43BE-9449-A12324347E6D@oracle.com> <002701ce5e33$620faaa0$262effe0$@reminetworks.com> <0561023C-4AFC-4281-BC62-764C12EC763D@oracle.com> <51A8FCA6.9050109@mitre.org> <004401ce5e3a$01854b70$048fe250$@reminetworks.com> <CA+ZpN24S9fEfFsgMtu8pN-ct-100+HVSHAfqO4Yy2SksrYt1eA@mail.gmail.com> <255B9BB34FB7D647A506DC292726F6E1151B105DA5@WSMSG3153V.srv.dir.telstra.com>
From: Tim Bray <twbray@google.com>
Date: Wed, 05 Jun 2013 23:25:22 -0700
Message-ID: <CA+ZpN25_tguPtPDktmM8q=72EgnesignTuWE19wi61gCTLLL_g@mail.gmail.com>
To: "Manger, James H" <James.H.Manger@team.telstra.com>
Content-Type: multipart/alternative; boundary="089e01538c92dee20904de766267"
X-Gm-Message-State: ALoCoQlTqkWv3H5V1LbqnmCzbOxl5rTXN1Pn9qXpWGd1NFYVuizAC7mnyyWt63HPNkkyJOWn/IQBPkzUoI91y6RREfqP/uaJxzmS3VKFANogEmiTrCx81QiLJjmj9/CZs/70qnWeTR1fqOXHaZ/r8GNuKrOIlECwru9A0NC2Cjr0OUfhlI+sF63AyD/n50jBM7+evBp/2RCt
Cc: "oauth@ietf.org" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] draft-ietf-oauth-dyn-reg and bearer tokens
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 06 Jun 2013 06:25:54 -0000

On Wed, Jun 5, 2013 at 9:06 PM, Manger, James H <
James.H.Manger@team.telstra.com> wrote:

> BEARER tokens dominate OAuth 2 deployments today, but OAuth 2 is
> deliberately extensible to support other sorts of credentials (eg MAC
> authentication).****
>
> ** **
>
> Why is draft-ietf-oauth-dyn-reg hardwired to only support BEARER tokens?
>

Because bearer tokens have a stable RFC-numbered spec and are widely
implemented and the registration flow as documented seems like it should
work?  -T


> ****
>
> ** **
>
> 1.3. “Registration Tokens and Credentials” says:****
>
> ** **
>
>   “The Initial Access Token … is an OAuth 2.0 Bearer Token”****
>
> ** **
>
>   “The Registration Access Token … is an OAuth 2.0 Bearer Token”****
>
> ** **
>
> Google’s TLS ChannelIDs [draft-balfanz-tls-channelid], for instance, would
> be a fantastic fit for linking the first registration request with any
> subsequent registration modifications. The Registration Access Token would
> be annoying legacy baggage in that situation.****
>
> ** **
>
> ** **
>
> It seems that the Registration Access Token is only ever used at a single
> URI: registration_client_uri. That sounds like the perfect situation to use
> a “capability URI”, effectively putting the token in the URI. Anyone
> considered doing that? It should significantly simplify the spec.****
>
> ** **
>
> --****
>
> James Manger****
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>
>

v2.23.0 | Report a Bug | By Email