Re: [OAUTH-WG] Dynamic client registration and the audience (resource) indicators

2016-11-28 Thread John Bradley
To make something like this work with a loose coupling between the RS and AS the format of the AT would also need to be specified. To this point the WG has avoided standardizing AT. Most AS probably believe they know what RS the token is going to be used at based on scopes. Taking those token

Re: [OAUTH-WG] Dynamic client registration and the audience (resource) indicators

2016-11-28 Thread Sergey Beryozkin
Hi Justin Thanks, may be if a value for that field is not set, then, by default, a client can use the access tokens against the arbitrary RS servers, as far as I understand this is what happens by default right now ? Cheers, Sergey On 28/11/16 18:47, Justin Richer wrote: I would consider th

Re: [OAUTH-WG] Dynamic client registration and the audience (resource) indicators

2016-11-28 Thread Justin Richer
I would consider that a totally reasonable extension. You will need to define what the behavior is if the client doesn’t provide a value for that field: is there a default? Are there no resources available to the client? — Justin > On Nov 28, 2016, at 12:21 PM, Sergey Beryozkin wrote: > > Hi

[OAUTH-WG] Dynamic client registration and the audience (resource) indicators

2016-11-28 Thread Sergey Beryozkin
Hi All Our AS allows for the manual client registration with the UI offering an option to assign the audience/resource URIs to a given Client registration with all the associated future access tokens inheriting them. The client will not have to follow the resource indicator registration as r