<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Hi,<div>I prefer this RESTful endpoints design with "_links" params.</div><div><br></div><div>ps.</div><div>Explicitly saying "servers MUST be able to identify a specific client using only its Self URL" might help.</div><div>Of course no implementations can exist without this condition though.</div><div><div><div><br><div><div>On 2013/02/07, at 7:06, Nat Sakimura <<a href="mailto:sakimura@gmail.com">sakimura@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">Thanks Justin!<div><br></div><div>Looks pretty good. </div><div>I still feel that REQUIRED, etc. in the clause 2. a bit awkward, though. I feel that they should be in the respective request clauses. </div><div><br></div><div>
Nat<br><div><br><div class="gmail_quote">2013/2/6 Justin Richer <span dir="ltr"><<a href="mailto:jricher@mitre.org" target="_blank">jricher@mitre.org</a>></span><br><blockquote class="gmail_quote" style="margin: 0px 0px 0px 0.8ex; border-left-width: 1px; border-left-color: rgb(204, 204, 204); border-left-style: solid; padding-left: 1ex; position: static; z-index: auto; ">
<div bgcolor="#FFFFFF" text="#000000">
I've incorporated many of Nat's design choices into the OAuth DynReg
document and have posted to the OAuth list for feedback. This
includes use of RESTful HTTP verbs and the link structure for
communicating the endpoint URLs. I also incorporated some of his
editor's notes which also came up earlier on the OAuth list,
including JSON-in. <br>
<br>
I left in a method to do rotate_secret, pending discussion on the
functionality. It parallels the client_update function in many ways.<br>
<br>
I would encourage everyone to read over the new DynReg spec before
the OIDC call tomorrow. <br>
<br>
<a href="http://tools.ietf.org/html/draft-ietf-oauth-dyn-reg" target="_blank">http://tools.ietf.org/html/draft-ietf-oauth-dyn-reg</a><span class="HOEnZb"><font color="#888888"><br>
<br>
-- Justin</font></span><div><div class="h5"><br>
<br>
<div>On 02/06/2013 02:17 AM, Mike Jones
wrote:<br>
</div>
<blockquote type="cite">
<div><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Updated
versions attached that also address Brian Campbell’s review
comments on Registration. The versions at
<a href="http://openid.bitbucket.org/" target="_blank">http://openid.bitbucket.org/</a>
were also updated.<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">
-- Mike<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<div>
<div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0in 0in 0in"><p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">
Mike Jones
<br>
<b>Sent:</b> Tuesday, February 05, 2013 7:12 PM<br>
<b>To:</b> 'Nat Sakimura'<br>
<b>Cc:</b> <a href="mailto:openid-specs-ab@lists.openid.net" target="_blank">openid-specs-ab@lists.openid.net</a> Group;
Justin Richer<br>
<b>Subject:</b> RE: [Openid-specs-ab] Dynamic Client
Registration<u></u><u></u></span></p>
</div>
</div><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">I’ve
applied the parts of Nat’s discussion draft that implement
working group decisions to the current registration draft.
Changes applied are:<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p><p><span style="font-size:11.0pt;font-family:Symbol;color:#1f497d"><span>·<span style="font:7.0pt "Times New Roman"">
</span></span></span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Tracked
wording changes intended to better harmonize with the OAuth
registration draft<u></u><u></u></span></p><p><span style="font-size:11.0pt;font-family:Symbol;color:#1f497d"><span>·<span style="font:7.0pt "Times New Roman"">
</span></span></span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Corrected
version number to -15. (Apparently it had been erroneously
incremented twice – once by me, once by Nat)<u></u><u></u></span></p>
<ul type="disc">
<li class="MsoNormal" style="margin-right:48.0pt">
<span style="font-family:"Verdana","sans-serif"" lang="EN">Fixed #746 - Deleted the
</span><span lang="EN">operation</span><span style="font-family:"Verdana","sans-serif"" lang="EN"> parameter.
<u></u><u></u></span></li>
<li class="MsoNormal" style="margin-right:48.0pt">
<span style="font-family:"Verdana","sans-serif"" lang="EN">Fixed #745 - Deleted the
</span><span lang="EN">rotate_secret</span><span style="font-family:"Verdana","sans-serif"" lang="EN">
operation.
<u></u><u></u></span></li>
<li class="MsoNormal" style="margin-right:48.0pt">
<span style="font-family:"Verdana","sans-serif"" lang="EN">Changed the Japanese client name to make it
sound more natural.
<u></u><u></u></span></li>
<li class="MsoNormal" style="margin-right:48.0pt">
<span style="font-family:"Verdana","sans-serif"" lang="EN">Added optional </span>
<span lang="EN">issued_at</span><span style="font-family:"Verdana","sans-serif"" lang="EN"> response value.
<u></u><u></u></span></li>
<li class="MsoNormal" style="margin-right:48.0pt">
<span style="font-family:"Verdana","sans-serif"" lang="EN">Added client update example.<u></u><u></u></span></li>
</ul><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">I
did not apply these changes:<u></u><u></u></span></p><p class="MsoNormal" style="margin-left:.5in">
<span style="font-size:10.0pt;font-family:Symbol;color:#1f497d"><span>·<span style="font:7.0pt "Times New Roman"">
</span></span></span><span style="font-family:"Verdana","sans-serif"">Moved
Terminology section out of Introduction to form an
independent section and added several terminology
definitions</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">
– This would make the section hierarchy of registration
different than all the other Connect specs<u></u><u></u></span></p><p class="MsoNormal" style="margin-left:.5in">
<span style="font-size:10.0pt;font-family:Symbol"><span>·<span style="font:7.0pt "Times New Roman"">
</span></span></span><span style="font-family:"Verdana","sans-serif"">Added
Client Read Request (GET)</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">
– No working group decision to add this operation</span><span style="font-family:"Verdana","sans-serif""><u></u><u></u></span></p><p class="MsoNormal" style="margin-left:.5in">
<span style="font-size:10.0pt;font-family:Symbol"><span>·<span style="font:7.0pt "Times New Roman"">
</span></span></span><span style="font-family:"Verdana","sans-serif"">Added
Client Delete Request (DELETE)</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">
– No working group decision to add this operation</span><span style="font-family:"Verdana","sans-serif""><u></u><u></u></span></p><p class="MsoNormal" style="margin-left:.5in">
<span style="font-size:10.0pt;font-family:Symbol"><span>·<span style="font:7.0pt "Times New Roman"">
</span></span></span><span style="font-family:"Verdana","sans-serif"">Added
"Self URL"</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">
– No working group decision to add this functionality</span><span style="font-family:"Verdana","sans-serif""><u></u><u></u></span></p><p class="MsoNormal" style="margin-left:.5in">
<span style="font-size:10.0pt;font-family:Symbol"><span>·<span style="font:7.0pt "Times New Roman"">
</span></span></span><span style="font-family:"Verdana","sans-serif"">Added </span><tt><span style="font-size:10.0pt;color:#003366">_links</span></tt><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">
– No working group decision to add this functionality</span><span style="font-family:"Verdana","sans-serif""><u></u><u></u></span></p><p class="MsoNormal" style="margin-left:.5in">
<span style="font-size:10.0pt;font-family:Symbol"><span>·<span style="font:7.0pt "Times New Roman"">
</span></span></span><span style="font-family:"Verdana","sans-serif"">Added
Editor's Notes</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">
– We should be tracking issues in the issue tracker instead</span><span style="font-family:"Verdana","sans-serif""><u></u><u></u></span></p><p class="MsoNormal" style="margin-left:.5in">
<span style="font-size:10.0pt;font-family:Symbol"><span>·<span style="font:7.0pt "Times New Roman"">
</span></span></span><span style="font-family:"Verdana","sans-serif"">Cleaned
up the indents</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">
– Were there were no text changes from the original version,
I tried to keep the exact text from the original to
facilitate diff’ing the .xml source. Where there were
changes, I tried to keep Nat’s .xml formatting.</span><span style="font-family:"Verdana","sans-serif""><u></u><u></u></span></p><p class="MsoNormal" style="margin-left:.5in">
<span style="font-size:10.0pt;font-family:Symbol"><span>·<span style="font:7.0pt "Times New Roman"">
</span></span></span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">I
also did not apply a big unlisted change, which had changed
the semantics of Client Update from replace-all-fields to
update-only-listed-fields – No working group decision to
change this functionality</span><span style="font-family:"Verdana","sans-serif""><u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:red">Justin</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">,
it would be good if you applied the changes made in this
version to the OAuth registration draft as well, because
there were numerous bug fixes – especially in the examples.
(BTW, you can’t put more than 70 characters in an
<artwork> line or xml2rfc complains when producing the
.txt version.)<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">The
.xml, .unpg (unpaginated text), and .html versions are
attached.<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">I’ll
send a few questions about the current text separately.<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">
-- Mike<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p><p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">
Nat Sakimura [<a href="mailto:sakimura@gmail.com" target="_blank">mailto:sakimura@gmail.com</a>]
<br>
<b>Sent:</b> Monday, February 04, 2013 2:03 PM<br>
<b>To:</b> Mike Jones<br>
<b>Cc:</b> <a href="mailto:openid-specs-ab@lists.openid.net" target="_blank">openid-specs-ab@lists.openid.net</a>
Group; Justin Richer<br>
<b>Subject:</b> Re: [Openid-specs-ab] Dynamic Client
Registration<u></u><u></u></span></p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">OK. Now I have uploaded the correct
Discussion Draft 17. <br>
<br>
HTML: <a href="http://nat.sakimura.org/wp-content/uploads/2013/02/draft-openid-connect-registration-1_0.html" target="_blank">http://nat.sakimura.org/wp-content/uploads/2013/02/draft-openid-connect-registration-1_0.html</a><br>
diff: <a href="http://nat.sakimura.org/wp-content/uploads/2013/02/openid-connect-registration-1_0-diff-16-17.txt" target="_blank">http://nat.sakimura.org/wp-content/uploads/2013/02/openid-connect-registration-1_0-diff-16-17.txt</a><u></u><u></u></p>
<div><p class="MsoNormal">XML: <a href="http://nat.sakimura.org/wp-content/uploads/2013/02/openid-connect-registration-1_0.xml" target="_blank">http://nat.sakimura.org/wp-content/uploads/2013/02/openid-connect-registration-1_0.xml</a><u></u><u></u></p>
</div>
<div><p class="MsoNormal">TXT (d16): <a href="http://nat.sakimura.org/wp-content/uploads/2013/02/openid-connect-registration-1_0-d16.txt" target="_blank">http://nat.sakimura.org/wp-content/uploads/2013/02/openid-connect-registration-1_0-d16.txt</a><u></u><u></u></p>
</div>
<div><p class="MsoNormal">TXT (d17): <a href="http://nat.sakimura.org/wp-content/uploads/2013/02/openid-connect-registration-1_0-d17.txt" target="_blank">http://nat.sakimura.org/wp-content/uploads/2013/02/openid-connect-registration-1_0-d17.txt</a><u></u><u></u></p>
</div>
<div><p class="MsoNormal"><br>
[Changes] <u></u><u></u></p><p style="margin-right:24.0pt;margin-bottom:5.0pt;margin-left:24.0pt"><span style="font-family:"Verdana","sans-serif"">-17
discussion version<u></u><u></u></span></p><p class="MsoNormal" style="margin-right:24.0pt;margin-left:60.0pt">
<span style="font-size:10.0pt;font-family:Symbol"><span>·<span style="font:7.0pt "Times New Roman"">
</span></span></span><span style="font-family:"Verdana","sans-serif"">Moved
Terminology section out of Introduction to form an
independent section and added several terminology
definitions<u></u><u></u></span></p><p class="MsoNormal" style="margin-right:24.0pt;margin-left:60.0pt">
<span style="font-size:10.0pt;font-family:Symbol"><span>·<span style="font:7.0pt "Times New Roman"">
</span></span></span><span style="font-family:"Verdana","sans-serif"">Deleted
the </span><tt><span style="font-size:10.0pt;color:#003366">operation</span></tt><span style="font-family:"Verdana","sans-serif""> parameter<u></u><u></u></span></p><p class="MsoNormal" style="margin-right:24.0pt;margin-left:60.0pt">
<span style="font-size:10.0pt;font-family:Symbol"><span>·<span style="font:7.0pt "Times New Roman"">
</span></span></span><span style="font-family:"Verdana","sans-serif"">Deleted
the </span><tt><span style="font-size:10.0pt;color:#003366">rotate_secret</span></tt><span style="font-family:"Verdana","sans-serif""><u></u><u></u></span></p><p class="MsoNormal" style="margin-right:24.0pt;margin-left:60.0pt">
<span style="font-size:10.0pt;font-family:Symbol"><span>·<span style="font:7.0pt "Times New Roman"">
</span></span></span><span style="font-family:"Verdana","sans-serif"">Added
Client Read Request (GET)<u></u><u></u></span></p><p class="MsoNormal" style="margin-right:24.0pt;margin-left:60.0pt">
<span style="font-size:10.0pt;font-family:Symbol"><span>·<span style="font:7.0pt "Times New Roman"">
</span></span></span><span style="font-family:"Verdana","sans-serif"">Added
Client Delete Request (DELETE)<u></u><u></u></span></p><p class="MsoNormal" style="margin-right:24.0pt;margin-left:60.0pt">
<span style="font-size:10.0pt;font-family:Symbol"><span>·<span style="font:7.0pt "Times New Roman"">
</span></span></span><span style="font-family:"Verdana","sans-serif"">Added
"Self URL"<u></u><u></u></span></p><p class="MsoNormal" style="margin-right:24.0pt;margin-left:60.0pt">
<span style="font-size:10.0pt;font-family:Symbol"><span>·<span style="font:7.0pt "Times New Roman"">
</span></span></span><span style="font-family:"Verdana","sans-serif"">Added </span><tt><span style="font-size:10.0pt;color:#003366">_links</span></tt><span style="font-family:"Verdana","sans-serif""><u></u><u></u></span></p><p class="MsoNormal" style="margin-right:24.0pt;margin-left:60.0pt">
<span style="font-size:10.0pt;font-family:Symbol"><span>·<span style="font:7.0pt "Times New Roman"">
</span></span></span><span style="font-family:"Verdana","sans-serif"">Added
Editor's Notes<u></u><u></u></span></p><p class="MsoNormal" style="margin-right:24.0pt;margin-left:60.0pt">
<span style="font-size:10.0pt;font-family:Symbol"><span>·<span style="font:7.0pt "Times New Roman"">
</span></span></span><span style="font-family:"Verdana","sans-serif"">Changed
the Japanese client name to make it sound more natural<u></u><u></u></span></p><p class="MsoNormal" style="margin-right:24.0pt;margin-left:60.0pt">
<span style="font-size:10.0pt;font-family:Symbol"><span>·<span style="font:7.0pt "Times New Roman"">
</span></span></span><span style="font-family:"Verdana","sans-serif"">Added
issued_at<u></u><u></u></span></p><p class="MsoNormal" style="margin-right:24.0pt;margin-left:60.0pt">
<span style="font-size:10.0pt;font-family:Symbol"><span>·<span style="font:7.0pt "Times New Roman"">
</span></span></span><span style="font-family:"Verdana","sans-serif"">Added
client update example (that seems to be missing many
parameters that were present in the registration request
example)<u></u><u></u></span></p><p class="MsoNormal" style="margin-right:24.0pt;margin-left:60.0pt">
<span style="font-size:10.0pt;font-family:Symbol"><span>·<span style="font:7.0pt "Times New Roman"">
</span></span></span><span style="font-family:"Verdana","sans-serif"">Cleand
up the indents<u></u><u></u></span></p><p class="MsoNormal">[Remarks] <u></u><u></u></p>
<div>
<ul type="disc">
<li class="MsoNormal">
The <tt><span style="font-size:10.0pt;color:#003366">operation</span></tt><span style="font-family:"Verdana","sans-serif""> parameter
was removed but since the URL for the registration and
other operations are different, there should be no
problem in finding out what action should be taken. </span><u></u><u></u></li>
<li class="MsoNormal">
The URL for update etc. (Self URL) are given in
_links/self/href. For servers' backward compatibility
with the current implementations, it could be set like
<span style="font-family:"Courier New""><a href="https://server.example.com/connect/register?operation=client_update" target="_blank">https://server.example.com/connect/register?operation=client_update</a></span>
so that the existing code is likely not break (if the
web application framework is putting GET and POST
parameters together into an object) or needs only minor
change. Clients needs to read this value and store, so
it is a bigger change. <u></u><u></u></li>
</ul>
<div><p class="MsoNormal">Unfortunately, I will be able to join
the call only very briefly due to my flight schedule. <u></u><u></u></p>
</div><p class="MsoNormal">-- <br>
Nat Sakimura (=nat)<br>
Chairman, OpenID Foundation<br>
<a href="http://nat.sakimura.org/" target="_blank">http://nat.sakimura.org/</a><br>
@_nat_en<u></u><u></u></p>
</div>
</div>
</div>
</blockquote>
<br>
</div></div></div>
</blockquote></div><br><br clear="all"><div><br></div>-- <br>Nat Sakimura (=nat)<div>Chairman, OpenID Foundation<br><a href="http://nat.sakimura.org/" target="_blank">http://nat.sakimura.org/</a><br>@_nat_en</div>
</div></div>
_______________________________________________<br>Openid-specs-ab mailing list<br><a href="mailto:Openid-specs-ab@lists.openid.net">Openid-specs-ab@lists.openid.net</a><br>http://lists.openid.net/mailman/listinfo/openid-specs-ab<br></blockquote></div><br></div></div></div></body></html>