[OAUTH-WG] A proposal for a new Internet Draft

2023-04-02 Thread Clinton Bunch
This seemed the most appropriate working group to post this suggestion. I would like to see a new Internet-Draft/RFC to add some well-known scopes to the IANA registry to promote adoption of Oauth in Groupware domains.  I will try to write it myself, but have no experience with I-Ds or as a te

Re: [OAUTH-WG] A proposal for a new Internet Draft

2023-04-02 Thread Clinton Bunch
would be well-known scopes that could be implemented with well-defined semantics. - Warren On Sun, Apr 2, 2023 at 8:12 PM Clinton Bunch wrote: This seemed the most appropriate working group to post this suggestion. I would like to see a new Internet-Draft/RFC to add some well-k

Re: [OAUTH-WG] A proposal for a new Internet Draft

2023-04-02 Thread Clinton Bunch
ic vendor name would hamper wide-spread adoption, so a namespace defined by a neutral party such as IETF seemed best. On Sun, Apr 2, 2023 at 8:46 PM Clinton Bunch wrote: On 4/2/2023 1:34 PM, Warren Parad wrote: I propose a set of nine well-known scopes Can you elaborate

Re: [OAUTH-WG] A proposal for a new Internet Draft

2023-04-02 Thread Clinton Bunch
most common use cases would include both read and write, I defined short-hand scopes that included both permissions. If that doesn't answer your question, then I'm not sure what you're looking for. On Sun, Apr 2, 2023 at 9:37 PM Clinton Bunch wrote: On 4/2/2023 2:26 P

Re: [OAUTH-WG] A proposal for a new Internet Draft

2023-04-02 Thread Clinton Bunch
n implementations and have them work for a wide set of users without placing an undue burden on the user. On Sun, Apr 2, 2023 at 9:57 PM Clinton Bunch wrote: On 4/2/2023 2:49 PM, Warren Parad wrote: But why these scopes? Separate read and write scopes for the three pieces of a

Re: [OAUTH-WG] A proposal for a new Internet Draft

2023-04-02 Thread Clinton Bunch
can't think of a manageable way to use scope to get more fine-grained than that. Perhaps defining a new optional claim with the URI of the specific calendar could be added to the request and the introspection response or JWT. -DW On Apr 2, 2023, at 12:12 PM, Clinton Bunch wrote:

Re: [OAUTH-WG] A proposal for a new Internet Draft

2023-04-02 Thread Clinton Bunch
this to calext or emailcore, but neither would be appropriate for all these scopes and Oauth would need to approve the IANA registration using this URI namespace.  So I tried here first. On Sun, Apr 2, 2023 at 11:24 PM Clinton Bunch wrote: On 4/2/2023 4:06 PM, Warren Parad wrote: Wh

Re: [OAUTH-WG] A proposal for a new Internet Draft

2023-04-03 Thread Clinton Bunch
mp;1 Mail & Media Development & Technology GmbH *From: *OAuth on behalf of Warren Parad *Date: *Monday, 3. April 2023 at 00:00 *To: *Clinton Bunch *Cc: *"oauth@ietf.org" *Subject: *Re: [OAUTH-WG] A proposal for a new Internet Draft I think it would make sense if after CalDA