FAPI_Meeting_Notes_2016 12 14

FAPI WG Meeting Notes (2016-12-14)

Date & Time: 2016-12-14 23:00 UTC

(15:00 PDT, 23:00 UK, 00:00 Denmark, 08:00+1 JST)

Location: GoToMeeting https://global.gotomeeting.com/join/321819862

Working Draft 02 3.1. Part 1: Read Only API Security Profile (Nat) 3.2. Part 2: Read Write API Security Profile 4. Issues (Nat) 5. Events 5.1. API Days (Nat) 6. External Orgs 6.1. Others 7. AOB 7.1. Next Call (Atlantic)

Agenda

• Roll Call
• Adoption of the Agenda (Anoop)
• Working Draft 02
  • Part 1: Read Only API Security Profile (Nat)
  • Part 2: Read Write API Security Profile
• Issues (Nat)
• Events
  • API Days (Nat)
• External Orgs
  • Others
• AOB
  • Next Call (Atlantic)

The meeting was called to order at _____ UTC.

Roll Call

• Present: Brian, Edmund, Sascha, Henrik, Anthony and Anoop
• Regrets: Anton
• Guest:

Adoption of the Agenda (Anoop)

Working Draft 02

• Financial_API_WD_001.md Financial API - Part 1: Read Only API Security Profile
• Financial_API_WD_002.md Financial API - Part 2: Read and Write API Security Profile
• Financial_API_WD_003.md Financial API - Part 3: Open Data API
• Financial_API_WD_004.md Financial API - Part 4: Protected Data API and Schema - Read only
• Financial_API_WD_005.md Financial API - Part 5: Protected Data API and Schema - Read and Write

Part 1: Read Only API Security Profile (Nat)

• Part 1: Read Only API Security Profile

  • https://bitbucket.org/openid/fapi/src/master/Financial_API_WD_001.md

Part 2: Read Write API Security Profile

• Not yet stated

Issues (Nat)

• https://github.com/openid/fapi/issues?q=is%3Aissue%20state%3Aopen
• #47 is closed by Sascha
• #32 Sascha will update
• #49 Anoop to update comments sent via email to ticket
• #40 Per Ed, we can close it as #47 is resolved.

Events

API Days (Nat)

• http://www.apidays.io/
• Dec 13 & 14 @ Paris. Nat got a ticket to Paris now.

• Two talk sessions:

  • one in CA session (workshop on the 13th?)
  • one in Banking API session (25 min. ) on the afternoon of the 14th.

• The one on the 13th will elaborate on Sascha's presentation @ OIDF WS this October.

• The one on the 14th will elaborate more on the security aspects of the OAuth/OpenID/JWS/JWT as previously submit in this list.

  • Will talk about Part 1.
  • Will talk about Part 2's direction.
  • Any other ideas?

• Nat will develop the slides probably on a corroborative editing platform so that WG members can assist him.

External Orgs

• Brian suggested to bring FAPI & OpenId to FS-ISAC consortium. Anoop to connect with Nat.

Others

AOB

Next Call (Atlantic)