Re: [OAUTH-WG] Non-repudiation for API requests and responses

2018-09-10 Thread Vladimir Dzhuvinov
Hi Samuel, Thanks for the quick update. Factoring out the c14n to a separate independent spec resulted in a much clearer draft. I don't see anything missing in terms of spec have it implemented. Can you suggest a Java library that can handle the c14n (rundgren-json-canonicalization-scheme)? We al

[OAUTH-WG] OAuth WG - Important Dates

2018-09-10 Thread Rifaat Shekh-Yusef
All, The following is a subset of the important date for IETF103: Important Dates IETF 103 : 2018-11-03, Bangkok, TH 2018-09-17 (Monday): Early Bird registration and payment cut-off at UTC 23:59. 2018-09-21 (Friday): Cut-off date for requests to schedule Working Group Meetings at UTC 23:59. 2018-

Re: [OAUTH-WG] Non-repudiation for API requests and responses

2018-09-10 Thread Samuel Erdtman
Hi Vladimir I have published an implementation created by Anders. You can find it here https://github.com/erdtman/java-json-canonicalization I have tested to add support for this in a JavaScript JOSE implementation (node-jose), it was super easy (just hours of work). Best regards On Mon, Sep 10

[OAUTH-WG] I-D Action: draft-ietf-oauth-token-exchange-15.txt

2018-09-10 Thread internet-drafts
A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Web Authorization Protocol WG of the IETF. Title : OAuth 2.0 Token Exchange Authors : Michael B. Jones Anthony Nadalin