[Openid-specs-ab] Spec call notes 6-Jun-11

[Mike Jones]

Spec call notes 6-Jun-11

Mike Jones
Nat Sakimura
Edmund Jay
John Bradley
Chuck Mortimore
Breno de Medeiros

Remaining spec work items:

  - Proposal to get back multiple endpoints for OpenID provider
                Plus non-endpoint information such as options supported, schemas, etc.

                One option to define types for proposed OAuth XRD
                Other to define a .well-known for OpenID with a JSON document

                Still use SWD for user information
                John will write up simple endpoint

  - UserInfo endpoint schema
                Mike pointed out that phone number, address, and timezone should be added
                Breno suggested that we use Facebook's data representations
                Mike will take point on this

  - Breno pointed out that OAuth response type became extensible at IETF meeting
                Requested response type could be something like code + identityassertion
                This is how Facebook plans to implement this
                Drop current openid parameter in favor of a new requested response type
                Breno will describe specific changes in e-mail, Edmund will incorporate

  - Session management
                Needs to be documented
                Breno suggested a new way to organize this part of the spec
                Edmund and Breno will meet to work on this together

  - Token introspection endpoint
                Needs to be documented
                Breno will add this Edmund meeting

  - Need to update binding documents
                Chuck pointed out that likely some drift in web server flow version
                Can update bindings after things discussed on call are done

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20110606/96a82214/attachment.html>