FAPI_Meeting_Notes_2019 10 16_Atlantic

FAPI WG Meeting Notes (2019-10-16)

Date & Time: 2019-10-16 14:00 UTC

Location: GoToMeeting https://global.gotomeeting.com/join/321819862

Agenda

• 1.   Roll Call
  • 1.1.   Attending:
  • 1.2.   Regrets: Dave
• 2.   Adoption of the Agenda (Joseph)
• 3.   OpenBanking CIBA
• 4.   Pull Requests
• 5.   Issues
• 6.   AOB

The meeting was called to order at 14:05 UTC.

1.   Roll Call

1.1.   Attending:

1. Bjorn
2. Dima
3. Nat
4. Brian
5. Kosuke
6. Joseph
7. Stuart
8. Freddi

1.2.   Regrets: Dave

2.   Adoption of the Agenda (Joseph)

3.   OpenBanking CIBA

Freddi shared that OpenBanking has published new draft specifications that align with FAPI-CIBA, links for these were shared and Joseph emailed them to the working group mailing list:

http://lists.openid.net/pipermail/openid-specs-fapi/2019-October/001566.html

4.   Pull Requests

https://bitbucket.org/openid/fapi/pull-requests/144 - looks to be awaiting updates from Torsten

5.   Issues

https://github.com/openid/fapi/issues/271 - waiting for Nat to send note to list

https://github.com/openid/fapi/issues/255 - Joseph to propose text to add clause to FAPI-v1 to emphasise clients should check

https://github.com/openid/fapi/issues/252 - close, point at connect bug tracker

https://github.com/openid/fapi/issues/251 - discussed and suggested raising it at the connect group

https://github.com/openid/fapi/issues/250 - discussed but no clear consensus on should vs must

https://github.com/openid/fapi/issues/249 - discussed but no clear consensus on should vs must

https://github.com/openid/fapi/issues/245 - close as spec seems to be clear enough

https://github.com/openid/fapi/issues/242 - Stuart agreed to produce a merge request for this

https://github.com/openid/fapi/issues/236 - charset is not required; Brian agreed to propose a change

6.   AOB

Stuart asked about the status of the lodging intent document; various members pointed out Torsten's latest work on the subject:

https://tools.ietf.org/html/draft-lodderstedt-oauth-rar-01

https://medium.com/oauth-2/rich-oauth-2-0-authorization-requests-87870e263ecb

https://medium.com/oauth-2/transaction-authorization-or-why-we-need-to-re-think-oauth-scopes-2326e2038948

There was discussion about whether FAPI-CIBA should move to referencing RAR (instead of the lodging intent document) but it was felt to be too early to do this but we should review the situation in a few months.

The meeting was adjourned at 14:56 UTC.