1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. fapi

Wiki

Clone wiki

fapi / FAPI_Meeting_Notes_2019-10-09_Atlantic

View History

FAPI WG Meeting Notes (2019-10-09)

Date & Time: 2019-10-09 14:00 UTC

Location: GoToMeeting https://global.gotomeeting.com/join/321819862

The meeting was called to order at 14:05 UTC.

1.   Roll Call

1.1.   Attending:

  1. Bjorn
  2. Dve
  3. Nat
  4. Brian
  5. Kosuke

#. Torsten Joseph

3.   Planning for HTTP Signature Session (Dave)

  • Anders, Manu, John, Mike Jones, Annabel, Ralph need to be there for the special call.

A doodle poll to be created.

4.   Issues

4.2.   #270 JARM (Joseph)

In the non-openid cases where scope does not include openid, "nonce" does not make sense. However, just requiring "state" is likely to be understating what the clients need to be doing to thwart CSRF etc. Callers agreed that requiring PKCE may be a better way to go. Folks should comment on the ticket of their opinions.

4.4.   #251 refresh token expiry time (Joseph)

There seem to be two ways of returning it and UK and Australia are going to a different direction. It may be interesting to find out what is the current majority practice by taking a survey at IIW.

5.   Pull Requests

5.1.   PR #142 Refresh Token (Joseph)

Joseph proposed a new wording on the call and there was a friendly amendment on it by Brian. Joseph is going to make a modified PR based on it so that people can review the concrete wording.

6.   AOB

The meeting was adjourned at 14:58 UTC.

Updated