[Openid-specs-ab] FW: 2024-01-25 "OpenID AB/C WG Call" meeting notes

[Michael Jones]

From: Sudesha Shetty <Sudesha.Shetty at gendigital.com<mailto:Sudesha.Shetty at gendigital.com>>
Date: Thursday, January 25, 2024 at 3:19 PM
To: openid-specs-ab at lists.openid.net<mailto:openid-specs-ab at lists.openid.net> <openid-specs-ab at lists.openid.net<mailto:openid-specs-ab at lists.openid.net>>
Subject: 2024-01-25 "OpenID AB/C WG Call" meeting notes
Hello Everyone,

Presented are the meeting notes from today's "OpenID AB/C WG Call" meeting.

Attendees:
Michael Jones
George Fletcher
Sudesha Shetty
Bjorn Hjelm
Lukasz Jaromin

Date: 25th January 2024

Summary:
During the meeting, the team went through the latest issues in the Bitbucket repository.

Issues Discussed:


  *   [#2101] [Native App SSO] No prescriptive restriction on the authorization server to protect an actor-less token exchange.<https://bitbucket.org/openid/connect/issues/2101/native-app-sso-no-prescriptive-restriction>

     *   George Fletcher will address this issue.

  *   [#2104] Allow trust marks in subordinate statements.<https://bitbucket.org/openid/connect/issues/2104/allow-trust-marks-in-subordinate>

     *   Changed status to "open".
     *   Michael Jones added comment inquiring about the appropriate circumstances for including a trust mark in a Subordinate Statement.

  *   [#2105] [Federation] Combined policy example<https://bitbucket.org/openid/connect/issues/2105/federation-combined-policy-example>

     *   Changed status to "open".
     *   George Fletcher questioned about allowing "implicit" in this case.
     *   Michael Jones checked and later confirmed that the syntax is correct.
     *   Michael Jones inquired about the intention behind including the "implicit" grant type in the example by commenting on the issue.

  *   [#2106] [Federation] Intermediate Entity Example<https://bitbucket.org/openid/connect/issues/2106/federation-intermediate-entity-example>

     *   Changed status to "open".
     *   Michael Jones commented on issue asking to file a pull request.

  *   [#2107] Relax client assertion requirements and extensibility at Trust Mark endpoints.<https://bitbucket.org/openid/connect/issues/2107/relax-client-assertion-requirements-and>

     *   Michael Jones expressed difficulty understanding the issue and plans to address it directly with Stefan during the European Federation Conference next week.
     *   Changed status to "new".

  *   [#2108] Track National Identity Schems that uses OpenID Connect<https://bitbucket.org/openid/connect/issues/2108/track-national-identity-schems-that-uses>

     *   Michael Jones provided a comment on the issue inquiring about Chile.

  *   [#2109] [Federation] List Endpoint response format<https://bitbucket.org/openid/connect/issues/2109/federation-list-endpoint-response-format>

     *   Changed status to "open".
     *   The issue suggests implementing pagination, a task acknowledged by George Fletcher as challenging in both design and implementation. Michael Jones notes that it introduces complexity. George Fletcher highlights the problem of receiving errors from the file provider due to responses exceeding accepted sizes.
     *   Concluded discussion by commenting on the issue "The SCIM experience is that pagination is a source of complexity. Handing the case where the data set changed between paginated calls is non-trivial."

  *   [#2053] Signatures in JWT examples are not all correct<https://bitbucket.org/openid/connect/issues/2053/signatures-in-jwt-examples-are-not-all>

     *   Opened issue 233<https://github.com/openid/OpenID4VCI/issues/233> in the OpenID4VCI github repository.


Thanks,
Sudesh


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20240216/e302f973/attachment-0001.html>