[scim] Concern in HTTP response status code for SCIM PATCH operation.

Dewni Weeraman <dewni@wso2.com> Wed, 15 January 2020 02:44 UTC

Return-Path: <dewni@wso2.com>
X-Original-To: scim@ietfa.amsl.com
Delivered-To: scim@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5E89D120831 for <scim@ietfa.amsl.com>; Tue, 14 Jan 2020 18:44:13 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.295
X-Spam-Level:
X-Spam-Status: No, score=-0.295 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_20=1.546, HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_3=0.148, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_REMOTE_IMAGE=0.01] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=wso2.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IwgkWvPztS6i for <scim@ietfa.amsl.com>; Tue, 14 Jan 2020 18:44:11 -0800 (PST)
Received: from mail-ed1-x532.google.com (mail-ed1-x532.google.com [IPv6:2a00:1450:4864:20::532]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B3063120803 for <scim@ietf.org>; Tue, 14 Jan 2020 18:44:11 -0800 (PST)
Received: by mail-ed1-x532.google.com with SMTP id bx28so14042697edb.11 for <scim@ietf.org>; Tue, 14 Jan 2020 18:44:11 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=wso2.com; s=google; h=mime-version:from:date:message-id:subject:to; bh=79DTXq9iH3+ulXPZhSKtZdYoy7h5Z8QAhCgzGtsTN6Y=; b=dUcnD6g3jZCHq6K4QqmkPBrEW9bUv3jGJwSpB6y2IAfPkSMNvErBofvg27lMkfiXrB kG4YdNvMxA5QJMlzrQ/Av6OguPFOGARZ8l0aFJMqD0xrMVeZp/GYL3hkXSC1/qqG01eF vMSM3rzQO3KMox+VdQaQtdKZX2nXCh1Rm6gSE=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=79DTXq9iH3+ulXPZhSKtZdYoy7h5Z8QAhCgzGtsTN6Y=; b=Pj8CZwNYIFjnCJRzhQdk5lFVICINnx4ciOW+5c+fAAEkUoURA077G/dwdJNvk7exsX P953fx0aXxvtV9iYpL7RHtj8m8tvGF+DjJOUm4qvJRhD+UmvHgXcjl4HgAJffcR1GRdO MD/9k4p+b5UtwLdEb5HEsPvAMMFwJPrmcedDKYnSHAn5ozdLcnXC8QmI1xPteGYHLkSj RMzebkneq5ZgBgdOPASI7QIexI38lu/angTB07U/vyhlqoMeYdHgkP2nwIb19BKR+cNm WtGC/xit0Kde+cLJ7K2bN/oAW5S9dLZPWfA8OTpZsxs0ptnS9YgfaAnzzx4I5O79oApc txDQ==
X-Gm-Message-State: APjAAAXLN+9KRD9PaQlCvdCWXEUIqi3DRqRrghGtPFfgCs4Ra2hIToM9 j2GgU3OhcPrrMFUTpKVGyOllyD8+j231d4YTl/M6BeOUmQ==
X-Google-Smtp-Source: APXvYqzPnbozvSMM4vKQX4+zuVfXi6e9TX1954i+0q1ro6fQjkTNHEVXl2ya0GiEvL0yL0e6bk4wlAcaiuUn8+tw8xA=
X-Received: by 2002:a17:906:7f02:: with SMTP id d2mr26741525ejr.261.1579056249730; Tue, 14 Jan 2020 18:44:09 -0800 (PST)
MIME-Version: 1.0
From: Dewni Weeraman <dewni@wso2.com>
Date: Wed, 15 Jan 2020 08:13:33 +0530
Message-ID: <CALLpvab6wULt6sNAS851f5UT0BtH1dOEx2xSrD53EemfU1JBXA@mail.gmail.com>
To: scim@ietf.org
Content-Type: multipart/alternative; boundary="000000000000d89255059c24ae0e"
Archived-At: <https://mailarchive.ietf.org/arch/msg/scim/YgiN2tIIJ1p48jLk-jgbv5Kjwpg>
Subject: [scim] Concern in HTTP response status code for SCIM PATCH operation.
X-BeenThere: scim@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Simple Cloud Identity Management BOF <scim.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scim>, <mailto:scim-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/scim/>
List-Post: <mailto:scim@ietf.org>
List-Help: <mailto:scim-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scim>, <mailto:scim-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 15 Jan 2020 02:45:58 -0000

Hi All,

I have a requirement to implement a feature to trigger email account
verification in a scenario where the user’s email address is updated. Till
email verification happens the email address of the user will not be
updated with the new email address. The above feature will be invoked via a
SCIM PATCH operation to update the email address.

As defined in the SCIM specification [1], on successful completion of a
PATCH request, the server returns either *200 - OK* or *204 - No Content*.
In my requirement, the HTTP response status code needs to be *202 -
Accepted* to indicate that the request has been accepted but the processing
has not been completed since the updated email is not verified. Therefore
I'm currently having concerns regarding the recommended HTTP status code to
be returned with the SCIM response.

Any input regarding the recommended HTTP response status code on a scenario
where a SCIM PATCH operation is performed for verifiable claims is highly
appreciated.

[1] https://tools.ietf.org/html/rfc7644#section-3.5.2

Kind regards,
Dewni Weeraman

-- 
Dewni Weeraman | Software Engineer | WSO2 Inc.
(m) +94 077 2979049 | (e) dewni@wso2.com <nipunib@wso2.com>

<http://wso2.com/signature>