<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hi Ralph, <div class=""><br class=""></div><div class="">** move the discussion to the list to give the WG a chance to contribute ***</div><div class=""><br class=""></div><div class="">Thanks for your feedback. </div><div class=""><br class=""></div><div class="">I trink using a fully qualified URL might solve some problems but creates new problems as the AS has to ensure the URL refers to a legit resource to prevent injection and other sorts of attacks. So at least the AS must maintain a whitelist of base URLs.</div><div class=""><br class=""></div><div class="">kind regards,</div><div class="">Torsten. <br class=""><div><br class=""><blockquote type="cite" class=""><div class="">Anfang der weitergeleiteten Nachricht:</div><br class="Apple-interchange-newline"><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);" class=""><b class="">Von: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class="">"Ralph Bragg" <<a href="mailto:pullrequests-reply@bitbucket.org" class="">pullrequests-reply@bitbucket.org</a>><br class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);" class=""><b class="">Betreff: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class=""><b class="">Aw: [Bitbucket] Pull request #90: new document describing the lodging intent pattern (openid/fapi)</b><br class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);" class=""><b class="">Datum: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class="">26. Januar 2019 um 20:27:00 MEZ<br class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);" class=""><b class="">An: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class=""><a href="mailto:torsten@lodderstedt.net" class="">torsten@lodderstedt.net</a><br class=""></span></div><br class=""><div class="">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" class="">
<div style="font: 14px/1.4285714 Arial, sans-serif; color: #333;" class="">
<table style="width: 100%; border-collapse: collapse;" class="">
<tbody class="">
<tr class="">
<td style="background: #f5f5f5; padding: 10px 10px 0; font: 14px/1.4285714 Arial, sans-serif;" class="">
<table style="width: 100%; border-collapse: collapse;" class="">
<tbody class="">
<tr class="">
<td id="main" class="comment-container " style="font: 14px/1.4285714 Arial, sans-serif; padding: 0; background-color: #fff; border-radius: 5px">
<div style="border: none; border-radius: 5px; padding: 0; background: #f5f5f5" class="">
<table style="width: 100%; border-collapse: collapse" class="">
<tbody class="">
<tr class="">
<td class="main-comment" style="font: 14px/1.4285714 Arial, sans-serif; padding: 0">
<div style="border: 1px solid #ccc; border-radius: 5px; background-color: #fff; padding: 20px" class="">
<span style="display: none; display: none !important;" class="">
Ralph Bragg commented on pull request #90: new document describing the lodging intent pattern
</span>
<table style="width: 100%; border-collapse: collapse" class="">
<tbody class="">
<tr class="">
<td class="comment" style="font: 14px/1.4285714 Arial, sans-serif; padding: 0">
<table style="width: 100%; border-collapse: collapse" class="">
<tbody class="">
<tr class="">
<td class="comment-avatar" style="font: 14px/1.4285714 Arial, sans-serif; padding: 0; width: 32px; vertical-align: top">
<img width="32" height="32" alt="RaidiamRalph" src="https://avatar-cdn.atlassian.com/3f0c9b6be1c8cff9cf36263cd75ba7b0?s=32&ts=1548529808" style="border-radius: 3px" class="">
</td>
<td class="comment-main" style="font: 14px/1.4285714 Arial, sans-serif; padding: 0 0 0 10px">
<table style="width: 100%; border-collapse: collapse" class="">
<tbody class="">
<tr class="">
<td class="comment-user" style="font: 14px/1.4285714 Arial, sans-serif; padding: 0; line-height: 1">
<strong class="">Ralph Bragg</strong> commented on pull request #90:
</td>
</tr>
<tr class="">
<td class="title" style="font: 14px/1.4285714 Arial, sans-serif; padding: 5px 0 0; font-weight: bold; line-height: 1.2">
<a href="https://bitbucket.org/openid/fapi/pull-requests/90/new-document-describing-the-lodging-intent#comment-89416617" style="color: #3572b0; text-decoration: none" class="">new document describing the lodging intent pattern</a>
</td>
</tr>
<tr class="">
<td class="comment-content markup-content" style="font: 14px/1.4285714 Arial, sans-serif; padding: 10px 0 15px"><div style="margin: 0px; padding: 0px;" class="">It’s a good idea to write a document detailing all of the combinations. Given that typically the staging of the consent will result in an object creation 201 etc i’d like too see one of the examples reference the created resource by URI explicitly rather than another abstraction. You touch on the various options for the RS and AS staging or hosting a functional request, by using a fully qualified URI in a similar manner to the request_uri parameter a lot of the issues with trying to technically locate and build URIs and retrieve the consents from the AS could be avoided.</div><p style="margin-bottom: 0; margin: 10px 0 0; padding: 0" class="">If i had the time again, I would have pushed hard for the OBIE to use an explicit resource not a referencee too it despite the concerns over the limitations in size of query string parameters. </p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr class="">
<td class="actions secondary" colspan="2" style="font: 14px/1.4285714 Arial, sans-serif; padding: 20px 0 0; color: #707070; border-top: 1px solid #ccc; line-height: 1">
<a href="https://bitbucket.org/openid/fapi/pull-requests/90/new-document-describing-the-lodging-intent#comment-89416617" style="color: #3572b0; text-decoration: none" class="">View this pull request</a> or add a comment by replying to this email.
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</div>
</td>
</tr>
</tbody>
</table>
<div itemscope="" itemtype="http://schema.org/EmailMessage" style="display:none;" class="">
<div itemprop="potentialAction" itemscope="" itemtype="http://schema.org/ViewAction" class="">
<link itemprop="target" href="https://bitbucket.org/openid/fapi/pull-requests/90/new-document-describing-the-lodging-intent#comment-89416617" class="">
<meta itemprop="name" content="View pull request" class="">
</div>
<meta itemprop="description" content="View this pull request on Bitbucket" class="">
</div>
</div>
</td>
</tr>
<tr class="">
<td style="padding: 20px 0; color: #707070;" class="">
<table style="width: 100%; border-collapse: collapse;" class="">
<tbody class="">
<tr class="">
<td style="padding: 0" class="">
<a style="color: #3572b0; text-decoration: none;" href="https://bitbucket.org/openid/fapi/pull-requests/90/unwatch/tlodderstedt/873891367895c8c139204ff38b1454aeecf78fc0a731b964909d7cdbdc00d32e/" class="">Unwatch this pull request</a> to stop receiving email updates.
</td>
<td style="padding: 0" class="">
<img width="1" height="1" src="https://bitbucket.org/account/notifications/mark-read/1321079408/41885b9532037cb9af1949f171bdef28ade166fda3311708881936d6d2a6c901/" class="">
</td>
<td style="text-align: right; width: 100px; padding: 0" class="">
<a href="https://bitbucket.org/" style="color: #3572b0; text-decoration: none;" class="">
<img width="125" height="18" src="https://d301sr5gafysq2.cloudfront.net/7bcc4bef4398/img/email/bitbucket-footer.gif" alt="Bitbucket" class="">
</a>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</div>
</div></blockquote></div><br class=""></div></body></html>