[Fiware-api-cross] Meeting in Paris

[DANGERVILLE Cyril]

Hello IdM GE owners,
I have a few technical issues that I'd like to discuss during the plenary meeting tomorrow, just for you to check, or you can answer by email if you prefer :

-          @Wolfgang (DT Global Customer Platform):

o   RESTful API for OAuth access token validation (i.e. send the access token to the IdM GE for validation): I think you mentioned such an API during one of our weekly conf calls but I could not find it in the latest documentation (GCP API documentation_v0-3.docx) you sent me/us. I would like to get more info on this to check whether there is any added value compared to validating the signature directly in the PDP.

o   OAuth client authentication to the OAuth Token service: require login/password authentication - or other standard auth method - to get an access token (e.g. in exchange for an authorization code)

-          @Robert (NSN One-IDM):

o   Creation of IdM instance for testing

o   Documentation on OAuth API usage, in particular:

§  OAuth access token format (JWT?)

§  How to validate the token: JWT signature checking? RESTful API?

§  How to get extra attributes on the resource-owner and OAuth client (esp. client ID) associated to the token

Regards,
Cyril D

De : fiware-security-bounces at lists.fi-ware.eu [mailto:fiware-security-bounces at lists.fi-ware.eu] De la part de Wolfgang.Steigerwald at telekom.de
Envoyé : mercredi 5 juin 2013 11:11
À : robert.seidl at nsn.com
Cc : fiware-security at lists.fi-ware.eu
Objet : [Fiware-security] Meeting in Paris

Hallo Robert,

here the filled slide for the meeting.

Best regards

Wolfgang
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fiware.org/private/fiware-api-cross/attachments/20130605/b01126af/attachment.html>