[GNAP] Access Token for Continuation API

[Justin Richer <[e-mail]>]

At Tuesday’s call, there was some general support for addressing issue #67 (https://github.com/ietf-wg-gnap/gnap-core-protocol/issues/67 <https://github.com/ietf-wg-gnap/gnap-core-protocol/issues/67>) by requiring the “continue” block of the response to include an “access_token” field, and consequently requiring the RC to present that access token when calling the continuation request endpoint/API. In the current draft, the access token is optional but the client is required to use the token if one is given by the AS, so the optionality was really only on the AS side.

The editors have made a pull request that makes the the access token mandatory:

https://github.com/ietf-wg-gnap/gnap-core-protocol/pull/129 <https://github.com/ietf-wg-gnap/gnap-core-protocol/pull/129>

This change hopefully also clarifies the nature of the access token being bound to the RC’s key and presentation mechanism, which means that the RC won’t need any additional functionality in order to call the continuation endpoint since it uses the same signing/proofing mechanisms that it did with its initial request. 

Since the process for this WG is new, I want to point out that “general support” in a meeting does not mean there is necessarily consensus for this change. The pull request represents a concrete proposal of changes that the editors believe would address this issue. Please review the pull request and provide any suggestions for better text for this issue. If you believe there is a better approach to this issue (#67), please provide alternative text changes.

Thanks,
— Justin