Wiki
Clone wikifapi / FAPI_Meeting_Notes_2023-11-02_Atlantic
FAPI WG Agenda & Meeting Notes (2023-11-02)
- Date & Time: 2023-11-02 14:00 UTC
- Location: https://zoom.us/j/97456084642?pwd=bTRFVzk4ZmlRK1M3bEprRlN5c3JFZz09
Agenda
The meeting was called to order at 14:03 UTC.
1. Roll Call (Nat)
- Attendees: Domingos, Nat, Brian, Dima, Bjorn, Joseph, Victor, Kosuke, Chris
- Regrets: Mike L.
2. Adoption of agenda (Nat)
- AOB: Call will be cancelled next week due to IETF.
- AOB: 2024 Initiatives https://docs.google.com/presentation/d/1JYpgQJDR853CzGTlLU14qmE_i88t3zHt/edit#slide=id.p29
3. Events (Mike L.)
3.1. IETF Prague
- We are cancelling the FAPI call as it collides with OAuth WG.
- Joseph and Nat are going to be there.
4. Liaison/Ext Org (Mike/Chris)
4.1. Saudi
- About to publish standard. Sticking to the same security profile for now. FAPI1 Adv + PAR.
- There will be associated notes for people to get ready to FAPI2?
5. PRs (Dave)
- PR 441
- https://bitbucket.org/openid/fapi/pull-requests/441
- We should not hide normative text in the NOTE. Dave to do another go.
- PR 444
- https://bitbucket.org/openid/fapi/pull-requests/444
- The typo needs to be fixed.
- PR 438 Phished code injection
- https://bitbucket.org/openid/fapi/pull-requests/438
- Passive form was removed from the PR. Nat approved.
- Joseph pointed out that something similar potentially need to be in FAPI2. Joseph will review the needs.
- PR 440 Clock Skew
- https://bitbucket.org/openid/fapi/pull-requests/440
- Mark to review the language.
- PR 442 improve wording around which grant and response types are supported
- https://bitbucket.org/openid/fapi/pull-requests/442
- We want to allow future specifications to be used with FAPI2 so we do not want to lock down only to response_type=code.
6. Issues (Dave)
n/a
7. AOB (Nat)
7.1. Clock change
The UK and the US will go off daylight saving time next week and the week after, respectively. This meeting is hinged to UTC, so it means the meeting time will shift t for them. Please be aware of it.
7.2. The meeting on the IETF week
- The call the week after conflicts with IETF OAuth WG F2F so we are cancelling it.
The meeting adjourned at 15:00.
Updated