bare request or response
Kevin Turner
kevin at janrain.com
Tue Sep 26 17:30:00 UTC 2006
On Mon, 2006-09-25 at 14:24 -0700, Dick Hardt wrote:
> 2) fetching signed claims (part of attribute exchange)
[...]
> IdP sends a fetch response to Issuer containing any attributes
> required by Issuer, and also user identifier
> * there was no preceding fetch request
> Issuer sends a store request to IdP with Claim
> * there is no matching store response
I guess you could do it that way, but it seems quite peculiar. Why are
you turning things inside-out in this exchange? Why "response, store"
rather than "fetch, respond"?
More information about the specs
mailing list