[Openid-specs-ab] Question on Core vs AB
sakimura at gmail.com
Wed Mar 23 01:40:43 UTC 2011
You are welcome to write one or two bindings :-)
For session management, Breno and Paul has been leading the discussion and
it is close to be baked.
Most discussion are happening at regular WG call every monday afternoon at
I will forward the call-in information to you if you would like to join.
# For those in the list - please indicate if you would like to join the
On Wed, Mar 23, 2011 at 10:31 AM, Chuck Mortimore <cmortimore at salesforce.com
> Thanks Nat - User agent and web server were the bindings I was looking
> for...basically the non-normative web server examples in core are pretty
> Is the session management discussion happening on list or off?
> Sorry I'm a little out of the loop. Just catching up now that my new baby
> girl is sleeping better.
> - cmort
> On Mar 22, 2011, at 6:06 PM, "Nat Sakimura" <sakimura at gmail.com> wrote:
> Hi Chuck,
> The core is just an abstract spec, akin to abstract class in object
> oriented programming.
> It does not define Bindings in it nor it requires Request File etc.
> One has to define a binding first. Artifact Binding is one such binding,
> but there is going to be
> User-Agent Flow Binding etc. as well. It just has not been written, partly
> due to we have gone into
> session management discussion before doing another binding. Actually,
> writing a binding is
> quite simple so we are tackling with harder problems right now.
> As to the binding, we are writing User-Agent Flow binding, Artifact
> Binding, and Web Server Flow binding probably.
> If you have anything else in mind, please suggest it.
> On Wed, Mar 23, 2011 at 9:43 AM, Chuck Mortimore <<cmortimore at salesforce.com>
> cmortimore at salesforce.com> wrote:
>> Question on this line in the Connect Core Spec:
>> This specification only defines the abstract messsage flow and message
>> formats. The actual use MUST base on one of the companion protocol bindings
>> specifications such as *OpenID Connect Artifact Binding 1.0 <#OpenID.AB>
>> * [OpenID.AB] .
>> It strikes me as Artifact Binding should be an optional way to use
>> connect, and that for many applications constructing an addressable
>> Authorization Request file is either difficult or un-necessary. CC
>> provides for direct query param serialization of the request. Why prevent
>> CC from being used directly?
>> Openid-specs-ab mailing list
>> <Openid-specs-ab at lists.openid.net>Openid-specs-ab at lists.openid.net
> Nat Sakimura (=nat)
Nat Sakimura (=nat)
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Openid-specs-ab