Re: [OAUTH-WG] I-D Action: draft-ietf-oauth-rar-07.txt
Torsten Lodderstedt <torsten@lodderstedt.net> Sun, 12 September 2021 15:37 UTC
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D6D693A0EEA for <oauth@ietfa.amsl.com>; Sun, 12 Sep 2021 08:37:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lodderstedt.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t5IXdiCZ8POE for <oauth@ietfa.amsl.com>; Sun, 12 Sep 2021 08:37:28 -0700 (PDT)
Received: from mail-ej1-x631.google.com (mail-ej1-x631.google.com [IPv6:2a00:1450:4864:20::631]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EAADD3A0EE8 for <oauth@ietf.org>; Sun, 12 Sep 2021 08:37:27 -0700 (PDT)
Received: by mail-ej1-x631.google.com with SMTP id o20so4662518ejd.7 for <oauth@ietf.org>; Sun, 12 Sep 2021 08:37:27 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lodderstedt.net; s=google; h=from:content-transfer-encoding:mime-version:subject:date:references :to:in-reply-to:message-id; bh=aw0mMTUKBXAWmPFFIPFEq3oZNmISB5eiFudMGQIl5F8=; b=UjqNQfQdvlzaCKMzDuj5IdOoZ9E2DDiX87grmCV8qAnou+A674wJgRdxQYUpcnJWXk gXVQha7DKDLhhyL7dEQqcn0Q0A6nOMPgpavQMwSusis6dwljBYbx+c2OCF3r7HJmGfl9 rxai+MdpN6/HqzvLxg/zYwcvvu+uNf7DLo4zF8WZHkq+oz95P+1BpAnI0WWL0PLnGQ5D fg+DHeY1X7F7TD2vvp+ViajIqMxyyurLtGqirNTvzMBJ/YL3XHmESQLzvcWKFBufoIqv lyqsvz8L8Oi1DNxf2fPDLEox6YZNaybI6esxPJi8pl/rLwTt4Z2XfkHMyJc3Wo4Ca/WE Ncfg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:content-transfer-encoding:mime-version :subject:date:references:to:in-reply-to:message-id; bh=aw0mMTUKBXAWmPFFIPFEq3oZNmISB5eiFudMGQIl5F8=; b=K9tbcy9oHCM3sc4NvAoIdRsjokVsTRn/ZIHI2IY4fXW4j+ME7nO4llDzC++x+Y+jMY Y/J7DK1kiTjXMJyjjA+9K6pzDUcM2QVDABTlpseObAHsfTIJ/YHFpCqrpdZfJ5slf+WH cyUQk668eSh4PvnsX5Fpth0vzPo2aA8mKgBLyIngz+VCBeGW3FgGfRq7oFGQ7zTHphLJ 0n4aymxcc9q3q35Qp1ItHtgzyubWEmzbzd5ZDedg3FFm2KPOXAhrtVr9ZsZIoOhUl0yT zIqCAeywKJ4d0TDinybpttTT/O0TgvyyAJzPgQwF5we+c3GnKt4ypGLsIThRmURWedGS 9NOA==
X-Gm-Message-State: AOAM533/Jmz6rLk966zK/fFcQwIy1RTlfwE2d6dgEby0wj8Gbye6V7Ww bcjHibfz1vz1smc9AqFiYRa2u403yb1OU3tD
X-Google-Smtp-Source: ABdhPJzgmKihSZZ7Q+dc14VSZqz4uOTKXzyFZvmKRlpW9FT4EosXWW2sR/kwsgiGCkq95LDJ00LQGw==
X-Received: by 2002:a17:907:1de0:: with SMTP id og32mr8015024ejc.348.1631461045409; Sun, 12 Sep 2021 08:37:25 -0700 (PDT)
Received: from smtpclient.apple ([46.183.103.8]) by smtp.gmail.com with ESMTPSA id j5sm2169973ejb.96.2021.09.12.08.37.22 for <oauth@ietf.org> (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Sun, 12 Sep 2021 08:37:25 -0700 (PDT)
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.120.0.1.13\))
Date: Sun, 12 Sep 2021 17:37:15 +0200
References: <163146070145.15835.6588780476124688306@ietfa.amsl.com>
To: oauth <oauth@ietf.org>
In-Reply-To: <163146070145.15835.6588780476124688306@ietfa.amsl.com>
Message-Id: <82D850BB-1BBE-426D-B4BD-862575F6C22E@lodderstedt.net>
X-Mailer: Apple Mail (2.3654.120.0.1.13)
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/tgWmF_sQVvKhi948fK0RG-t12Gw>
Subject: Re: [OAUTH-WG] I-D Action: draft-ietf-oauth-rar-07.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 12 Sep 2021 15:37:33 -0000
Hi all, we published a new revision -07 containing the following changes: • removed use of resource indicators to filter authorization details in token response (to simplify spec) • incorporated review feedback from WGLC • fixed wording in token introspection section • added privacy considerations re authorization details in token response Thanks to all the reviewers! best regards, Torsten. > Am 12.09.2021 um 17:31 schrieb internet-drafts@ietf.org: > > > A New Internet-Draft is available from the on-line Internet-Drafts directories. > This draft is a work item of the Web Authorization Protocol WG of the IETF. > > Title : OAuth 2.0 Rich Authorization Requests > Authors : Torsten Lodderstedt > Justin Richer > Brian Campbell > Filename : draft-ietf-oauth-rar-07.txt > Pages : 41 > Date : 2021-09-12 > > Abstract: > This document specifies a new parameter "authorization_details" that > is used to carry fine-grained authorization data in the OAuth > authorization request. > > > The IETF datatracker status page for this draft is: > https://www.google.com/url?q=https://datatracker.ietf.org/doc/draft-ietf-oauth-rar/&source=gmail-imap&ust=1632065562000000&usg=AOvVaw2mNxPXxbjUclgOYKnqcoWm > > There is also an HTML version available at: > https://www.google.com/url?q=https://www.ietf.org/archive/id/draft-ietf-oauth-rar-07.html&source=gmail-imap&ust=1632065562000000&usg=AOvVaw3H8e6Las-aD9X70yWaIawL > > A diff from the previous version is available at: > https://www.google.com/url?q=https://www.ietf.org/rfcdiff?url2%3Ddraft-ietf-oauth-rar-07&source=gmail-imap&ust=1632065562000000&usg=AOvVaw1KAg4Yy6K3TChmooA2YVmP > > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.google.com/url?q=https://www.ietf.org/mailman/listinfo/oauth&source=gmail-imap&ust=1632065562000000&usg=AOvVaw1w7aPQ263YvHjFUJZZQq8r
- [OAUTH-WG] I-D Action: draft-ietf-oauth-rar-07.txt internet-drafts
- Re: [OAUTH-WG] I-D Action: draft-ietf-oauth-rar-0… Torsten Lodderstedt