[openid-specs-rande] 20190114 meeting notes

Davide Vaghetti davide.vaghetti at garr.it
Tue Jan 15 16:22:42 UTC 2019


Hi Wolfgang,

no, unfortunately we didn't have time to go through entity attributes
and categories.

That said, to convert your examples into top-level claims I think we
have two options one is to raise the "entity-attr" value to a claim, as in:

{
  "application_type": "web",
  "redirect_uris": [...

[..]

  "entity_attrs": [
    {
      "namespace_url": "https://refeds.org/entity-attr/security",
      "ref_uris": ["https://refeds.org/sirtfi"],
    },
    {
      "namespace_url": "http://macedir.org/entity-category",
      "ref_uris": [
        "http://www.geant.net/uri/dataprotection-code-of-conduct/v1",
        "http://refeds.org/category/research-and-scholarship",
        "http://clarin.eu/category/clarin-member"
      ],
    }
  ]
}


I'm not completely sure the names of the claims make sense (and I think
I'm the one that came out with them anyway...). However, that is not the
real problem: we struggled to eliminate the complex `metadata_ext` JSON
object, and now we get back something very similar, though a little bit
less complex. I think we can reduce the complexity even further, at
least for entity categories, because we do not really need to define it
through URIs, we already have the specification itself. So I would go
for something like:

{
  "application_type": "web",
  "redirect_uris": [...

[..]

  "entity_attrs": [
    {
      "namespace_url": "https://refeds.org/entity-attr/security",
      "ref_uris": ["https://refeds.org/sirtfi"],
    }
  ],
  "entity_categories": [
    "http://www.geant.net/uri/dataprotection-code-of-conduct/v1",
    "http://refeds.org/category/research-and-scholarship",
    "http://clarin.eu/category/clarin-member"
  ]
}


Opinions?

Cheers,
Davide




On 15/01/19 13:53, Wolfgang Pempe wrote:
> Dear all,
> 
> Am 15.01.19 um 09:06 schrieb Davide Vaghetti:
>> Hi Nick,
>>
>> thanks for noticing! Now the 20190114 meeting notes are there.
> 
> my apologies for not joining the call. One question: did you also
> discuss the possible 'implementation' of entity attributes and categories?
> 
> Thanks,
> Wolfgang
> 
>>
>> Cheers,
>> Davide
>>
>>
>> On 14/01/19 23:05, Nick Roy wrote:
>>> Hi Davide,
>>>
>>> My apologies, I couldn’t attend today’s call. I can’t find the notes
>>> for the 20190114 meeting in this markdown.
>>>
>>> Nick
>>>
>>> On 14 Jan 2019, at 9:47, Davide Vaghetti wrote:
>>>
>>>> Hello,
>>>>
>>>> here are the meeting notes of today's call:
>>>>
>>>>   https://github.com/daserzw/oidc-edu-wg/blob/master/meeting_notes.md
>>>>
>>>> TL;DR we dropped the "metadata_ext" complex object in favor of
>>>> top-level
>>>> claims
>>>>
>>>> Cheers,
>>>> Davide
>>>> -- 
>>>> Davide Vaghetti
>>>> Consortium GARR
>>>> Tel: +390502213158
>>>> Mobile: +393357779542
>>>> Skype: daserzw
>>>>
>>>> -- 
>>>> openid-specs-rande mailing list
>>>> openid-specs-rande at lists.openid.net
>>>> http://lists.openid.net/mailman/listinfo/openid-specs-rande
>>
>>
> 
> 

-- 
Davide Vaghetti
Consortium GARR
Tel: +390502213158
Mobile: +393357779542
Skype: daserzw

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4136 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.openid.net/pipermail/openid-specs-rande/attachments/20190115/157ee0a4/attachment.p7s>


More information about the openid-specs-rande mailing list