FAPI_Meeting_Notes_2021 10 20_Atlantic

FAPI WG Meeting Notes (2021-10-20)

• Date & Time: 2020-10-20 14:00 UTC
• Location: GoToMeeting https://global.gotomeeting.com/join/321819862
• Note URI: https://github.com/openid/fapi/wiki/FAPI_Meeting_Notes_2021-10-13_Atlanti20

Agenda

• 1.   Roll Call (Dave/Nat)
• 2.   Adoption of Agenda (Dave/Nat)
• 3.   Events (Dave/Nat)
  • 3.1.   OpenID Foundation Workshop moved to December (Mike L.)
  • 3.2.   Authenticate/FIDO (Mike L)
• 4.   External Organizations (Dave/Nat)
  • 4.1.   Australia (Dima/Joseph)
  • 4.2.   Brazil (Mike)
  • 4.3.   Berlin Group (Nat)
  • 4.4.   Canada (Gail)
  • 4.5.   FDX (Mike)
  • 4.6.   Middle East and North Africa (Ali)
  • 4.7.   Russia (Mike)
  • 4.8.   UK (Chris)
• 5.   PRs (Dave)
• 6.   Issues (Dave/Nat)
  • 6.1.   #456 - Refresh Token Rotation
  • 6.2.   #410 - FAPI and Uma
• 7.   AOB (Nat)

The meeting was called to order at 14:__ UTC.

1.   Roll Call (Dave/Nat)

• Attending:
• Regrets: Francis
• Guest:

2.   Adoption of Agenda (Dave/Nat)

• Adopted as is.

3.   Events (Dave/Nat)

3.1.   OpenID Foundation Workshop moved to December (Mike L.)

It was originally planned for Oct. 21 but it collides with Authenticate so it was pushed to December 9th.

Thursday Dec. 9 @ 9:00 AM PST

https://openid.net/2021/10/19/registration-open-for-openid-foundation-virtual-workshop-thursday-december-9-2021/

3.2.   Authenticate/FIDO (Mike L)

https://openid.net/2021/10/11/announcing-openid-foundation-sessions-at-the-fido-member-plenary-on-thursday-october-21-2021/

4.   External Organizations (Dave/Nat)

4.1.   Australia (Dima/Joseph)

N/A

4.2.   Brazil (Mike)

• Pushed new RP test out.
• RP community up.
• Regulator setting an extremely aggressive schedule on the conformance test. OIDF may want to open a dialogue with the regulator to provide them with balanced information.

4.3.   Berlin Group (Nat)

• Joing WS was set.
• WS#1 : Monday Nov 15th 1pm-4pm (CET)
• WS#2: Wed Nov 24th (1pm to 4pm or 2pm to 5pm)
• WS#3: Friday Dec 10th (2pm to 5pm)
• OIDF need to send materials to read so that BG participants will be better prepared for them.

4.4.   Canada (Gail)

No updates

4.5.   FDX (Mike)

• FDX is preparing a blog post to be reviewed by OIDF.

4.6.   Middle East and North Africa (Ali)

• Nov. 4 DIFC Meeting.
• Putting together a team for local WG including banks.

4.7.   Russia (Mike)

• Fintech association Russia/OIDF meeting is being set up.

4.8.   UK (Chris)

5.   PRs (Dave)

n/a

6.   Issues (Dave/Nat)

6.1.   #456 - Refresh Token Rotation

• #456
• Since FAPI 2 is fully sender constrained, Refresh Token Rotation is probably not needed.
• AU experience shows that it is a bad idea to rotate refresh tokens.
• Agreed to put some text about recommending not to rotate refresh tokens.
• Stuart was assigned the issue.

6.2.   #410 - FAPI and Uma

• #410
• It would be good to do some analysis to see if UMA 2 can be used with FAPI 1/2.
• Part of the reason for this is that the UK Pensions Dashboard project is planning to use UMA 2
• https://blog.axway.com/industries/banking-insurance/the-pensions-dashboard
• Dave to reach out to Justin.

7.   AOB (Nat)

None.

The call adjourned at 15:00 UTC