FAPI_Meeting_Notes_2021 01 13_Atlantic

FAPI WG Meeting Notes (2021-01-13)

• Date & Time: 2020-01-13 14:00 UTC
• Location: GoToMeeting https://global.gotomeeting.com/join/321819862
• Note URI: https://github.com/openid/fapi/wiki/FAPI_Meeting_Notes_2020-09-30_Atlantic

Agenda

• 1.   Roll Call
• 2.   Adoption of Agenda (Nat)
• 3.   FAPI 1.0 Updates (Nat)
  • 3.1.   Final Title confirmation (Nat)
  • 3.2.   FAQ & 2021 Planning(Joseph/Don)
• 4.   FAPI 2.0 Updates (Daniel)
• 5.   Other Drafts
  • 5.1.   Grant Management (Dima)
  • 5.2.   HTTP Signing (Dave)
• 6.   Events (Nat)
  • 6.1.   UK (Chris)
  • 6.2.   Podcast on Jan 26. (Torsten)
• 7.   External Organizations (Nat)
  • 7.1.   GLEIF (Mark)
  • 7.2.   FDX (Nat/Don)
• 8.   AOB

The meeting was called to order at 14:05 UTC.

1.   Roll Call

• Attending: Nat, Don, Filip, Siva Boyalakunita, Joseph, Francis Pouatcha, Kosuke, Dima, Daniel, Steinar, Brian, Torsten, Dave, Kosuke, Chris Michael, Craig Borysowich, Bjorn Hjelm
• Regrets:
• Guest:

2.   Adoption of Agenda (Nat)

• FAPI FAQ & 2021 Planning

3.   FAPI 1.0 Updates (Nat)

3.1.   Final Title confirmation (Nat)

FAPI - Part 1: Baseline profile 1.0 OR FAPI 1.0 - Part 1: Baseline profile? In the latter case, what would JARM, Grant Management etc. go to be?

Discussed for 20 min.

Result:

• FAPI Security Profile 1.0 - Baseline
• FAPI Security Profile 1.0 - Advanced
• CIBA FAPI Profile
• JARM
• OAuth Grant Management

3.2.   FAQ & 2021 Planning(Joseph/Don)

2021 planning.

1. Financial-Grade API WG Roadmap (what is planned)
2. WG FAQ (How it happens) and
3. OpenID Foundation Calendar (when it happens)

Machine-readable certification data and new style pages are coming up.

New look page is live: https://openid.net/certification/#FAPI_OPs

4.   FAPI 2.0 Updates (Daniel)

x-fapi-* headers

https://github.com/openid/fapi/issues?q=is%3Aissue%20state%3Aopen%20label%3A%22component%3A%20FAPI2%3A%20Security%20Profile%22

• #290: x-fapi-interaction-id across client to AS and RS interactions => ID2
• #282: FAPI 2.0: x-fapi-* headers => ID2
• #336: FAPI 2 Baseline - Client types => ID2
• #337: Intro text in Basline => ID1
• #346: RAR requirement may be unnecessary? => Recommendation for ecosystem, MUST for vendor? => ID1 (Torsten/Daniel)
• #348: FAPI2 Release Communication

5.   Other Drafts

5.1.   Grant Management (Dima)

• Probably able to report next week.
• https://bitbucket.org/openid/fapi/pull-requests/217

5.2.   HTTP Signing (Dave)

• DPoP style HTTP signing.
• GNAP drafts have 6 signing mechanisms, and one of them is very similar.

6.   Events (Nat)

6.1.   UK (Chris)

• About to go out for consultation of VRP and Sweep till End of FEb. Spec to be out in March.
• Extended customer attributes. (Premium API). A couple of workshops. Next Wednesday and in a month time.
• Then a short public consultation.

6.2.   Podcast on Jan 26. (Torsten)

Workshop with Australia to be confirmed in a week.

7.   External Organizations (Nat)

7.1.   GLEIF (Mark)

Try to find a suitable project to work on eKYC.

7.2.   FDX (Nat/Don)

Intro to eKYC/IDA to FDX to be prepared.

8.   AOB

The meeting was adjourned at 15:10 UTC.