[GNAP] Client discovery

"Varley, Mike" <mike.varley@avast.com> Wed, 10 August 2022 13:01 UTC

Return-Path: <mike.varley@avast.com>
X-Original-To: txauth@ietfa.amsl.com
Delivered-To: txauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ECB47C136338 for <txauth@ietfa.amsl.com>; Wed, 10 Aug 2022 06:01:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.689
X-Spam-Level:
X-Spam-Status: No, score=-2.689 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.582, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=avast.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Y_NHFmcMq_0C for <txauth@ietfa.amsl.com>; Wed, 10 Aug 2022 06:01:49 -0700 (PDT)
Received: from mail-vs1-xe33.google.com (mail-vs1-xe33.google.com [IPv6:2607:f8b0:4864:20::e33]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1BE84C138FA2 for <txauth@ietf.org>; Wed, 10 Aug 2022 06:01:49 -0700 (PDT)
Received: by mail-vs1-xe33.google.com with SMTP id 125so15031343vsd.5 for <txauth@ietf.org>; Wed, 10 Aug 2022 06:01:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=avast.com; s=google; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :from:to:cc; bh=ClOFYCTg+sAQyUozXEn5nVvDeWdPIGedzvWQt5X+bGI=; b=Ig3YQPa/UCrOecvw3En351BD4AQP/lGE2Qs03uAPamb7wH39UbrKf9sIhinLCLpdqH IcvKvLF40Z9TMyu9xSo1uQoWuNzjfe5UEZm8KoQE85TuDc+ooX0CuC8q632DEGHczKxH I+Ut9tAHJrAMN/zrnL3576BA/YpUEQhUkhezw=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :x-gm-message-state:from:to:cc; bh=ClOFYCTg+sAQyUozXEn5nVvDeWdPIGedzvWQt5X+bGI=; b=uluh2pgFAuZBJhaO93fkmuM8cB9+GfR/PmLkh1ZWoy5dpWF9kBxv2vBc6l6uiU8GHe UW3tNnU6V2CmE9M9vJ+XSmkVebVYLkmFNOm8oCti5aJO+Q8SlFOnLcqegOFo3CQc3fj1 AFTKE1LuNRVrY+XYdg6V2YJKKtgiInAX1qzAZAvlTrxgwk4LWmwbnu/lMRB/B3EPNvvu ywAH+NwH3HA7jYr7TuyT+5QtHxQxIkJwCDUrvuNZn5H6ISAa2eTuSSOS1LNT3Vy/DNue nxNiN4JQ/ob1K+h1+L5hdJMqPp6Oy2/goTi5gISFp7CkCqRKUWUX3FL8DuCzOkwCExlD bQ8Q==
X-Gm-Message-State: ACgBeo0myUtNb8l7JCYeJwJ0bJZSohJlwAjDoy6pFaAtieP65HxI8w3J KXlBljaz5p2vKkvjHaQxTYl/fflqzP9D0JXX9erYoCHGur8=
X-Google-Smtp-Source: AA6agR7ZjXNWh0tXIW9cBtAuwy6B+ZZ/aTBOOwYLjfD9NMhJ2K9/iWh6S0ZqtVwpcJxix+PVq//hG/SujtRqbn3kviI=
X-Received: by 2002:a67:c00b:0:b0:38a:8c2b:d1e4 with SMTP id v11-20020a67c00b000000b0038a8c2bd1e4mr397666vsi.35.1660136507649; Wed, 10 Aug 2022 06:01:47 -0700 (PDT)
MIME-Version: 1.0
References: <CAM_o2M-31hfOLdV+pXz1FdywFYyM9UWLoxOfxO+U1uTK_+BTOg@mail.gmail.com>
In-Reply-To: <CAM_o2M-31hfOLdV+pXz1FdywFYyM9UWLoxOfxO+U1uTK_+BTOg@mail.gmail.com>
From: "Varley, Mike" <mike.varley@avast.com>
Date: Wed, 10 Aug 2022 09:01:37 -0400
Message-ID: <CAM_o2M95-JAG+fSer8THLQFK5cYi5v7Tpd+p_xs648CHg+F-9A@mail.gmail.com>
To: txauth@ietf.org
Content-Type: text/plain; charset="UTF-8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/txauth/bP3RJngHOVM3nfCgYOEOuxlbdyg>
Subject: [GNAP] Client discovery
X-BeenThere: txauth@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: GNAP <txauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/txauth>, <mailto:txauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/txauth/>
List-Post: <mailto:txauth@ietf.org>
List-Help: <mailto:txauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/txauth>, <mailto:txauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 10 Aug 2022 13:01:53 -0000

Resending, apologies if you received this twice.
(I forgot to register my new email address with the list - hopefully
this goes through!)

-------

There is a proposal in the OpenID Connect group on client discovery:
https://bitbucket.org/openid/connect/issues/1589/proposal-for-supporting-client-discovery

As part of the initial request, there is a mechanism whereby a
client_id can be used to resolve to client-meta data for the AS to
make a determination as to whether the client is qualified to
communicate with the AS.

For GNAP, this seems like something that may fit in with Identifying
the Client Instance; Section 2.3.1 Identifying Client by Reference
section.

I realise it may be a bit late for changes, but would the group be
open to adding normative text on how an AS should handle client
references that are URLs?

I could submit a PR - but there may be a lot of details to cover here
so it may be more suitable as an extension?

Thoughts?

MV