FAPI_Meeting_Notes_2020 03 11_Atlantic

FAPI WG Meeting Notes (2020-03-11)

Date & Time: 2020-03-11 14:00 UTC

Location: GoToMeeting https://global.gotomeeting.com/join/321819862

Agenda

• 1.   Roll Call
  • 1.1.   Attending:
  • 1.2.   Guests:
  • 1.3.   Regrets:
• 2.   Adoption of Agenda (nat)
• 3.   External Organizations
  • 3.1.   IETF 107
  • 3.2.   ISO/IEC JTC 1/SC 27 (Nat)
  • 3.3.   Open Banking (Chris)
• 4.   Pull Requests (Nat)
  • 4.1.   fixed references to PAR & RAR (Torsten)
  • 4.2.   first version grant-management-api (Torsten)
• 5.   Issues
  • 5.1.   #282 FAPI 2.0: x-fapi-* headers
  • 5.2.   #188: Broken link in FAPI part 1 ID2
  • 5.3.   #124: More examples as an appendix
  • 5.4.   #184: Privacy implications of oauth-mtls due to tls 1.2 sending client certs unencrypted
• 6.   AOB

The meeting was called to order at 14:__ UTC.

1.   Roll Call

1.1.   Attending:

1. Nat
2. Torsten
3. Dave
4. Brian
5. Daniel
6. Kosuke
7. Dima
8. Joseph
9. Chris
10. Daniel
11. Dima
12. Mark Haine
13. Barry

1.2.   Guests:

n/a

1.3.   Regrets:

2.   Adoption of Agenda (nat)

3.   External Organizations

3.1.   IETF 107

F2F cancelled.

There may be no OAuth WG Sessions.

Virtual interim. DPOP call for adoption is expected to go out pretty soon.

3.2.   ISO/IEC JTC 1/SC 27 (Nat)

Saint Petersburg F2F meeting was cancelled. Still, we need to send a liaison report to them so WG members were invited to send the text that they want to send to the chairs.

3.3.   Open Banking (Chris)

Ask for help from FAPI WG.

Demos of the certification test and q & a session. Updates in FAPI.

Push the certification against FAPI a good thing to do.

Later parts of April.

OpenID Foundation Seminar, with support from OBIE.

Doodle poll for dates within the WG.

4.   Pull Requests (Nat)

4.1.   fixed references to PAR & RAR (Torsten)

• https://bitbucket.org/openid/fapi/pull-requests/148

An editorial glitch in the pull request. Daniel will fix it. It should be accepted after it.

4.2.   first version grant-management-api (Torsten)

• https://bitbucket.org/openid/fapi/pull-requests/147

Merged.

5.   Issues

5.1.   #282 FAPI 2.0: x-fapi-* headers

Need to document how it is being used, and potentially how it is tested in the conformance test.

5.2.   #188: Broken link in FAPI part 1 ID2

Joseph, Nat and Edmund should connect to fix the issue in the draft generation pipeline.

5.3.   #124: More examples as an appendix

Add examples in the 1.0 final.

5.4.   #184: Privacy implications of oauth-mtls due to tls 1.2 sending client certs unencrypted

Closed as it is documented in the MTLS spec as https://www.rfc-editor.org/rfc/rfc8705.html#name-privacy-considerations

6.   AOB

None.

The meeting was adjourned at 14:59 UTC.