Clone wiki

fapi / FAPI_Meeting_Notes_2020-02-26_Atlantic

FAPI WG Meeting Notes (2020-02-26)

Date & Time: 2020-02-26 14:00 UTC

Location: GoToMeeting

The meeting was called to order at 14:__ UTC.

1.   Roll Call

1.1.   Attending:

  1. Nat
  2. Dave Tonge
  3. Torsten
  4. Brian
  5. Daniel
  6. DIma
  7. Don
  8. James Bellairs
  9. Joseph
  10. Kosuke
  11. Perdam
  12. Pri Pillay (Stitch)
  13. Stuart

5.   FAPI Evolution (Torsten)

Torsten provided the presentation:

  • Rob: User interface issues. Many wants ROPC to keep control of the UI.
  • Ralph: consent means different so need clarification.

Fine-grained authorization request

Consent is application-specific. More granular and complex as time goes by.

8.   Issues and Pull requests.

Meeting starts at 11:00 GMT. Remote participation is available.

Ask Don if we can use the room until 5 PM.

9.   Presentation for the SWIFT Conference on the 18th (torsten)

OIDF sales pitch with an emphasis on FAPI (API Security) and eKYC.

Use as the base and add a few slides for Swift.

9.1.   Swift Identity APIs

Benefits With 3SKey, SWIFT shoulders your burden to build, maintain and update a technical infrastructure. 3SKey provides a common solution for strong authentication and digital identity, which can be used on any electronic banking channel, including offline applications, web-banking, local and proprietary networks, and SWIFT. 3SKey uses industry standards and provides toolkits and APIs for easy and rapid integration in applications while ensuring maximum security. 3SKey for Banks factsheet .pdf RESOURCE Trusted and cost-effective solution for strong authentication and digital identity.

10.   Issues

10.1.   issue #278: duplicate kids in the authorization server's jwks (Joseph)

  • Document the key selection algorithm when a duplicated kid is present.
  • FAPI certification should give a “pass” to duplicated kids.

11.   AOB


The meeting was adjourned at 14:__ UTC.