Re: [OAUTH-WG] Authorization handover from mobile app to website

2021-03-18 Thread SOMMER, DOMINIK
(and it’s keypair) to generate arbitrary ID tokens. However, I probably get something wrong ☺ - Dominik Von: Nov Matake Gesendet: Samstag, 13. März 2021 05:00 An: SOMMER, DOMINIK Cc: oauth@ietf.org Betreff: Re: [OAUTH-WG] Authorization handover from mobile app to website You can make your app an

Re: [OAUTH-WG] Authorization handover from mobile app to website

2021-03-12 Thread Nov Matake
You can make your app an OIDC self-issued IdP for your website. One of my clients are using the mechanism for Native App SSO, where an OIDC self-issued IdP embedded in the Native App is acting as IdP for the backend IdP server. Unfortunately I have no english document now, but this slide descri

Re: [OAUTH-WG] Authorization handover from mobile app to website

2021-03-12 Thread George Fletcher
I can't find a record of sending this to the list, but I wrote this ID back in 2013 and we've implemented it. At the time I did vet it with a few people. Hopefully it might be helpful :) Thanks, George On 3/12/21 1:18 PM, SOMMER, DOMINIK wrote: Hi all, we have recently launched a mobile app

[OAUTH-WG] Authorization handover from mobile app to website

2021-03-12 Thread SOMMER, DOMINIK
Hi all, we have recently launched a mobile app that uses our website’s login and authorization code flow to authenticate and authorize user access (following RFC8252). However, not all of our website features are natively ported to the app itself. Some are only available on the website in logg