[OAUTH-WG] Re: Token Status List Shepherd Write-up - Implementations

[Michael Schwartz <[e-mail]>]

Christian,

We implemented Session Status List in Janssen Auth Server:
https://docs.jans.io/head/janssen-server/auth-server/endpoints/session-status-list/


Also, we have a PR for Status List token validation in the Cedarling PDP
which is almost done:   https://github.com/JanssenProject/jans/pull/11520

- Mike

--------------------------------------
Michael Schwartz
Gluu
Founder/CEO
[e-mail]
https://www.linkedin.com/in/nynymike

On Mon, Jun 2, 2025 at 9:37 AM <[e-mail]> wrote:

> Send OAuth mailing list submissions to
>         [e-mail]
>
> To subscribe or unsubscribe via email, send a message with subject or
> body 'help' to
>         [e-mail]
>
> You can reach the person managing the list at
>         [e-mail]
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of OAuth digest..."
>
> Today's Topics:
>
>    1. Re: Token Status List Shepherd Write-up - Implementations
>       (Christian Bormann)
>    2. Re: OAuth 2.1 Draft version 12 expired 19.05.2025
>       (Antic Kristian (C/CYG-GE))
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Mon, 2 Jun 2025 15:02:18 +0200
> From: Christian Bormann <[e-mail]>
> Subject: [OAUTH-WG] Re: Token Status List Shepherd Write-up -
>         Implementations
> To: Rifaat Shekh-Yusef <[e-mail]>
> Cc: oauth <[e-mail]>
> Message-ID: <[e-mail]>
> Content-Type: multipart/alternative;
>         boundary="Apple-Mail=_814837D8-8D6F-44E8-9B9B-0B27BDC45877"
>
> Hi Rifaat,
>
> We have a small list of open source implementations that we are aware of
> and which agreed to being added to our repository:
>
> https://github.com/oauth-wg/draft-ietf-oauth-status-list?tab=readme-ov-file#implementations-open-source
>
> Regards,
> Christian
>
> > On 1. Jun 2025, at 14:04, Rifaat Shekh-Yusef <[e-mail]>
> wrote:
> >
> > All,
> >
> > As part of the shepherd write-up for the Token Status List document,
> > we are looking for information about implementations of this draft.
> >
> > https://datatracker.ietf.org/doc/draft-ietf-oauth-status-list/
> >
> > Please, reply to this email, on the mailing list, with any
> implementations that you are aware of to support this document.
> >
> > Regards,
> > Rifaat
> > _______________________________________________
> > OAuth mailing list -- [e-mail]
> > To unsubscribe send an email to [e-mail]
>
> -------------- next part --------------
> A message part incompatible with plain text digests has been removed ...
> Name: not available
> Type: text/html
> Size: 1492 bytes
> Desc: not available
>
> ------------------------------
>
> Message: 2
> Date: Mon, 2 Jun 2025 14:36:48 +0000
> From: "Antic Kristian (C/CYG-GE)" <[e-mail]>
> Subject: [OAUTH-WG] Re: OAuth 2.1 Draft version 12 expired 19.05.2025
> To: Aaron Parecki <aaron=[e-mail]>, Rifaat
>         Shekh-Yusef      <[e-mail]>
> Cc: "[e-mail]" <[e-mail]>
> Message-ID:  <[e-mail]
>         PRD10.PROD.OUTLOOK.COM>
> Content-Type: multipart/alternative;    boundary="_000_DB9PR10MB80762E
>         CF2748CA29098F2569A162ADB9PR10MB8076EURP_"
>
> Hi,
>
> thank you both for your quick reply and Aaron for the updated draft
> version (https://datatracker.ietf.org/doc/html/draft-ietf-oauth-v2-1-13)
>
> Mit freundlichen Grüßen / Best regards
>
> Kristian Antic
>
> Cyber Security - Governance Enterprise IT (C/CYG-GE)
> Robert Bosch GmbH | Postfach 30 02 20 | 70442 Stuttgart | GERMANY |
> www.bosch.com<http://www.bosch.com/>
> [e-mail]<mailto:[e-mail]>
>
> Sitz: Stuttgart, Registergericht: Amtsgericht Stuttgart, HRB 14000;
> Aufsichtsratsvorsitzender: Prof. Dr. Stefan Asenkerschbaumer;
> Geschäftsführung: Dr. Stefan Hartung, Dr. Christian Fischer, Dr. Markus
> Forschner,
> Stefan Grosch, Dr. Markus Heyn, Dr. Frank Meyer, Katja von Raven, Dr.
> Tanja Rückert
>
> From: Aaron Parecki <aaron=[e-mail]>
> Sent: Wednesday, May 28, 2025 4:07 PM
> To: Rifaat Shekh-Yusef <[e-mail]>
> Cc: Antic Kristian (C/CYG-GE) <[e-mail]>;
> [e-mail]
> Subject: Re: [OAUTH-WG] Re: OAuth 2.1 Draft version 12 expired 19.05.2025
>
> I've been working on related documents, mainly the OAuth for Browser Apps
> BCP, and haven't come back around to this one in a while.
>
> I just published an update that fixes some references including updating
> the Security BCP references to RFC 9700, so it shows as an active draft
> again.
>
> Aaron
>
>
> On Fri, May 23, 2025 at 4:09 AM Rifaat Shekh-Yusef <
> [e-mail]<mailto:[e-mail]>> wrote:
> Hi Kristian,
>
> No, this does not mean that the document is near finalization.
> This just means that the authors did not have a chance to work on the
> document.
>
> Regards,
>  Rifaat
>
>
>
> On Fri, May 23, 2025 at 5:02 AM Antic Kristian (C/CYG-GE) <Kristian.Antic=
> [e-mail]<mailto:[e-mail]>>
> wrote:
> Dear OAuth Working Group,
>
> I have noticed that the latest draft (draft-ietf-oauth-v2-1-12<
> https://datatracker.ietf.org/doc/html/draft-ietf-oauth-v2-1-12>) for
> OAuth 2.1 has expired on May 19, 2024.
> I would like to inquire whether this indicates that the specification is
> nearing finalization, or if work is underway on a new draft version.
> Thank you for your time and clarification.
>
> Mit freundlichen Grüßen / Best regards
>
> Kristian Antic
>
> Cyber Security - Governance Enterprise IT (C/CYG-GE)
> Robert Bosch GmbH | Postfach 30 02 20 | 70442 Stuttgart | GERMANY |
> www.bosch.com<http://www.bosch.com/>
> [e-mail]<mailto:[e-mail]>
>
> Sitz: Stuttgart, Registergericht: Amtsgericht Stuttgart, HRB 14000;
> Aufsichtsratsvorsitzender: Prof. Dr. Stefan Asenkerschbaumer;
> Geschäftsführung: Dr. Stefan Hartung, Dr. Christian Fischer, Dr. Markus
> Forschner,
> Stefan Grosch, Dr. Markus Heyn, Dr. Frank Meyer, Katja von Raven, Dr.
> Tanja Rückert
>
> _______________________________________________
> OAuth mailing list -- [e-mail]<mailto:[e-mail]>
> To unsubscribe send an email to [e-mail]<mailto:
> [e-mail]>
> _______________________________________________
> OAuth mailing list -- [e-mail]<mailto:[e-mail]>
> To unsubscribe send an email to [e-mail]<mailto:
> [e-mail]>
> -------------- next part --------------
> A message part incompatible with plain text digests has been removed ...
> Name: not available
> Type: text/html
> Size: 9718 bytes
> Desc: not available
>
> ------------------------------
>
> Subject: Digest Footer
>
> _______________________________________________
> OAuth mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
>
>
> ------------------------------
>
> End of OAuth Digest, Vol 200, Issue 2
> *************************************
>

-- 





*CONFIDENTIALITY NOTICE*

This message may contain confidential or 
legally privileged information.
If you are not the intended recipient, 
please immediately advise the sender by reply e-mail that you received this 
message, and delete this e-mail from your system.
Thank you for your 
cooperation