[OAUTH-WG] Httpdir telechat review of draft-ietf-oauth-step-up-authn-challenge-13

2023-04-04 Thread Mark Nottingham via Datatracker
Reviewer: Mark Nottingham Review result: Not Ready # HTTPDIR review of drat-ietf-oauth-step-up-authn-challenge-13 I am an assigned HTTP directorate reviewer for draft-ietf-masque-connect-ip. These comments were written primarily for the benefit of the ART Area Directors. Document editors and shep

Re: [OAUTH-WG] A proposal for a new Internet Draft

2023-04-04 Thread Dave Tonge
For something more fine-grained than scopes there is RAR: https://www.ietf.org/archive/id/draft-ietf-oauth-rar-23.html On Mon, 3 Apr 2023 at 18:19, Clinton Bunch wrote: > I was under the impression from my reading of the spec, that scopes were > only ever intended as coarse-grained authorization