<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:0 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Helvetica Neue Light";
panose-1:2 0 4 3 0 0 0 2 0 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
p.p1, li.p1, div.p1
{mso-style-name:p1;
margin:0in;
margin-bottom:.0001pt;
font-size:10.5pt;
font-family:"Helvetica Neue Light";
color:#0F0F0F;}
p.p2, li.p2, div.p2
{mso-style-name:p2;
margin:0in;
margin-bottom:.0001pt;
font-size:9.0pt;
font-family:Helvetica;}
p.p3, li.p3, div.p3
{mso-style-name:p3;
margin:0in;
margin-bottom:.0001pt;
font-size:10.5pt;
font-family:"Helvetica Neue Light";
color:#094B6A;}
span.s1
{mso-style-name:s1;
color:#094B6A;}
span.s2
{mso-style-name:s2;
color:#0F0F0F;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt">Hi,<o:p></o:p></span></p>
<p class="p1"><span style="font-size:11.0pt">We are working on implementing SSE and CAEP and are trying to tie the SSE and CAEP. In particular, the SSE
</span><span class="s1"><a href="https://openid.net/specs/openid-sse-framework-1_0-01.html#stream-config">Stream Configuration</a></span> section describes a “delivery” property that holds details of how SETs get delivered to the receiver. It says that:<o:p></o:p></p>
<p class="p2"><o:p> </o:p></p>
<p class="p1">> The actual delivery method is identified by the special key method with the value being a URI as defined in
<a href="https://openid.net/specs/openid-sse-framework-1_0-01.html#delivery-meta">
<span class="s1">Section 11.2.1</span></a>.<o:p></o:p></p>
<p class="p2"><o:p> </o:p></p>
<p class="p1"><span class="apple-converted-space"> </span>If you look at an <a href="https://openid.net/specs/openid-sse-framework-1_0-01.html#reading-a-streams-configuration">
<span class="s1">example response</span></a> though, it has the keys “delivery_method” and “url”:<o:p></o:p></p>
<p class="p2"><o:p> </o:p></p>
<p class="p1">HTTP/1.1 200 OK<o:p></o:p></p>
<p class="p1">Content-Type: application/json; charset=UTF-8<o:p></o:p></p>
<p class="p1"><span lang="ES">Cache-Control: no-store<o:p></o:p></span></p>
<p class="p1"><span lang="ES">Pragma: no-cache<o:p></o:p></span></p>
<p class="p2"><span lang="ES"><o:p> </o:p></span></p>
<p class="p1">{<o:p></o:p></p>
<p class="p3"><span class="apple-converted-space"><span style="color:#0F0F0F"> </span>
</span><span class="s2">"iss": "<a href="https://tr.example.com"><span class="s1">https://tr.example.com</span></a>",</span><o:p></o:p></p>
<p class="p1"><span class="apple-converted-space"> </span>"aud": [<o:p></o:p></p>
<p class="p3"><span class="apple-converted-space"><span style="color:#0F0F0F">
</span></span><span class="s2">"<a href="http://receiver.example.com/web"><span class="s1">http://receiver.example.com/web</span></a>",</span><o:p></o:p></p>
<p class="p3"><span class="apple-converted-space"><span style="color:#0F0F0F">
</span></span><span class="s2">"<a href="http://receiver.example.com/mobile"><span class="s1">http://receiver.example.com/mobile</span></a>"</span><o:p></o:p></p>
<p class="p1"><span class="apple-converted-space"> </span>],<o:p></o:p></p>
<p class="p1"><span class="apple-converted-space"> </span>"delivery": {<o:p></o:p></p>
<p class="p1"><span class="apple-converted-space"> </span>"delivery_method":<o:p></o:p></p>
<p class="p3"><span class="apple-converted-space"><span style="color:#0F0F0F">
</span></span><span class="s2">"<a href="https://schemas.openid.net/secevent/risc/delivery-method/push"><span class="s1">https://schemas.openid.net/secevent/risc/delivery-method/push</span></a>",</span><o:p></o:p></p>
<p class="p3"><span class="apple-converted-space"><span style="color:#0F0F0F">
</span></span><span class="s2">"url": "<a href="https://receiver.example.com/events"><span class="s1">https://receiver.example.com/events</span></a>"</span><o:p></o:p></p>
<p class="p1"><span class="apple-converted-space"> </span>},<o:p></o:p></p>
<p class="p1"><span class="apple-converted-space"> </span>"events_supported": [<o:p></o:p></p>
<p class="p1"><span class="apple-converted-space"> </span>"urn:example:secevent:events:type_1",<o:p></o:p></p>
<p class="p1"><span class="apple-converted-space"> </span>"urn:example:secevent:events:type_2",<o:p></o:p></p>
<p class="p1"><span class="apple-converted-space"> </span>"urn:example:secevent:events:type_3"<o:p></o:p></p>
<p class="p1"><span class="apple-converted-space"> </span>],<o:p></o:p></p>
<p class="p1"><span class="apple-converted-space"> </span>"events_requested": [<o:p></o:p></p>
<p class="p1"><span class="apple-converted-space"> </span>"urn:example:secevent:events:type_2",<o:p></o:p></p>
<p class="p1"><span class="apple-converted-space"> </span>"urn:example:secevent:events:type_3",<o:p></o:p></p>
<p class="p1"><span class="apple-converted-space"> </span>"urn:example:secevent:events:type_4"<o:p></o:p></p>
<p class="p1"><span class="apple-converted-space"> </span>],<o:p></o:p></p>
<p class="p1"><span class="apple-converted-space"> </span>"events_delivered": [<o:p></o:p></p>
<p class="p1"><span class="apple-converted-space"> </span>"urn:example:secevent:events:type_2",<o:p></o:p></p>
<p class="p1"><span class="apple-converted-space"> </span>"urn:example:secevent:events:type_3"<o:p></o:p></p>
<p class="p1"><span class="apple-converted-space"> </span>]<o:p></o:p></p>
<p class="p1">}<o:p></o:p></p>
<p class="p2"><o:p> </o:p></p>
<p class="p1">Down in section <a href="http://11.2.1.1."><span class="s1">11.2.1.1</span></a> it says the keys of the push delivery are “method”, “endpoint_url”, and “authorization_header”. What is not clear is whether those keys are siblings of “delivery_method”
and “url” in the “delivery” object of the example above, like this:<o:p></o:p></p>
<p class="p2"><o:p> </o:p></p>
<p class="p1"><span class="apple-converted-space"> </span>"delivery": {<o:p></o:p></p>
<p class="p3"><span class="apple-converted-space"><span style="color:#0F0F0F">
</span></span><span class="s2">"delivery_method": "<a href="https://schemas.openid.net/secevent/risc/delivery-method/push"><span class="s1">https://schemas.openid.net/secevent/risc/delivery-method/push</span></a>",</span><o:p></o:p></p>
<p class="p1"><span class="apple-converted-space"> </span>"url": "https://receiver.example.com/events”,<o:p></o:p></p>
<p class="p3"><span class="apple-converted-space"><span style="color:#0F0F0F">
</span></span><span class="s2">“method": "<a href="https://schemas.openid.net/secevent/risc/delivery-method/push"><span class="s1">https://schemas.openid.net/secevent/risc/delivery-method/push</span></a>",</span><o:p></o:p></p>
<p class="p1"><span class="apple-converted-space"> </span>“endpoint_url”: "https://receiver.example.com/events”,<o:p></o:p></p>
<p class="p1"><span class="apple-converted-space"> </span>“authorization_header”: “some-secret-key”<o:p></o:p></p>
<p class="p1"><span class="apple-converted-space"> </span>},<o:p></o:p></p>
<p class="p2"><o:p> </o:p></p>
<p class="p1">or whether they nest under a “method” property like this:<o:p></o:p></p>
<p class="p2"><o:p> </o:p></p>
<p class="p1"><span class="apple-converted-space"> </span>"delivery": {<o:p></o:p></p>
<p class="p3"><span class="apple-converted-space"><span style="color:#0F0F0F">
</span></span><span class="s2">"delivery_method": "<a href="https://schemas.openid.net/secevent/risc/delivery-method/push"><span class="s1">https://schemas.openid.net/secevent/risc/delivery-method/push</span></a>",</span><o:p></o:p></p>
<p class="p1"><span class="apple-converted-space"> </span>"url": "https://receiver.example.com/events”,<o:p></o:p></p>
<p class="p1"><span class="apple-converted-space"> </span>“method": {<o:p></o:p></p>
<p class="p3"><span class="apple-converted-space"><span style="color:#0F0F0F">
</span></span><span class="s2">“method”: “<a href="https://schemas.openid.net/secevent/risc/delivery-method/push"><span class="s1">https://schemas.openid.net/secevent/risc/delivery-method/push</span></a>",</span><o:p></o:p></p>
<p class="p1"><span class="apple-converted-space"> </span>“endpoint_url”: "https://receiver.example.com/events”,<o:p></o:p></p>
<p class="p1"><span class="apple-converted-space"> </span>“authorization_header”: “some-secret-key”<o:p></o:p></p>
<p class="p1"><span class="apple-converted-space"> </span>}<o:p></o:p></p>
<p class="p1"><span class="apple-converted-space"> </span>},<o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Or, perhaps this makes more sense from the descriptions:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Helvetica Neue Light";color:#0F0F0F">"delivery": {<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Helvetica Neue Light";color:#0F0F0F">“method": "<a href="https://schemas.openid.net/secevent/risc/delivery-method/push"><span style="color:#094B6A">https://schemas.openid.net/secevent/risc/delivery-method/push</span></a>",</span><span style="font-size:10.5pt;font-family:"Helvetica Neue Light";color:#094B6A"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Helvetica Neue Light";color:#0F0F0F">“endpoint_url”: "https://receiver.example.com/events”,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Helvetica Neue Light";color:#0F0F0F">“authorization_header”: “some-secret-key”<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Helvetica Neue Light";color:#0F0F0F">},<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Can you help clarify?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Thanks, Nancy<o:p></o:p></span></p>
</div>
</body>
</html>