Skip to content

FAPI_Meeting_Notes_2023 01 11_Atlantic

Jump to bottom
Nat Sakimura edited this page Jul 10, 2026 · 1 revision

FAPI WG Agenda & Meeting Notes (2023-01-11)

Agenda

The meeting was called to order at 14:03 UTC.

1.   Roll Call (Dave/Nat)

  • Attending:
  • Regrets:
  • Guest:

2.   Adoption of Agenda (Nat)

3.   Second Implementer’s Drafts of Two FAPI 2.0 Specifications

4.   Events (Mike L.)

4.1.   OIDF Calendar

4.2.   Identiverse submissions

4.3.   EIC Submission due Feb. 8

4.4.   Open Banking Latin America

Gavin Littlejohn organising. May or June. Likely to be in Rio

5.   Internal Liaisons

5.1.   Open Banking Paper

5.2.   Modrna WG

Bjorn gave a report about claims parameter support for CIBA to organize a call for interested parties to work on it.

5.3.   iGov WG

  • Multiple acr values in requests as an array expressing a preference.
    • Conformance suite behavior seems to be different
    • Only EAP profile specifies ACR values
    • George states that if some prefer a combination of acr values, having an array for stating preference doesn’t work and would need to create a new acr value that is a combination of preferred values.
    • Theres not much implementation of ACR
    • Some would not like to NIST values due to list of requirements
  • The WG is to consider creating a profile so that it can be tested.

5.4.   CFPB Comments

https://files.consumerfinance.gov/f/documents/cfpb_data-rights-rulemaking-1033-SBREFA_outline_2022-10.pdf

https://files.consumerfinance.gov/f/documents/cfpb_data-rights-rulemaking-1033-SBREFA-high-level-summary-discussion-guide_2022-10.pdf

6.   External Orgs & Liaisons (Mike L./Chris)

6.1.   Brazil (Mike)

  • Continuing to receive high volume of recertification requests.
  • CIBA spec certification is coming up.
  • Open Finance (Insurance) conforming coming. Domingo etc. had an event this Monday.

6.2.   SAMA (Mike)

  • Finalized KSA FAPI Profile. We expect access to the mock bank to create a certification test.
  • New milestone - initial KSA FAPI profile January 16. Three banks agreed to test the test. Feb. 1 for the production target for 12 banks to certify then.

6.3.   Security Analysis

  • Next phase contract is done. Kicking off.

6.4.   OIDF-J Event: BizDay

6.5.   IETF

  • DPoP is in IETF last call.
  • Step up authentication WG finished. AD/IESG stage.

7.   Drafts Updates (Nat)

7.1.   Security Profile

  • Need to merge some editorial fixes/typos

7.2.   Message Signing

  • Not much feedback from Last Call
  • A bunch of issues are being filed. We need to resolve them before moving forward.
  • WG members are asked to chime into the tickets early to create PRs.

7.3.   Grant Management

n/a

7.4.   CIBA

  • Dave will investigate the possibility of making it compatible with FAPI 1 and 2
  • A joint call with Modrna WG is being planned. Tracked as issue #559 - Co-ordinate a joint call with Modrna WG on claims parameter for CIBA

7.5.   Implementation and Deployment Advice

  • A bunch of issues updated.

7.6.   Advanced Authorization

n/a

8.   PRs (Dave)

8.1.   401 - FAPI2MS: Reword section about testing

8.2.   400 - FAPI2MS: Make [security profile] a real reference

8.3.   309 - Remove old specs

8.4.   397 - FAPI-CIBA: Remove FAPILI from normative references

8.5.   396 - FAPI2MS: Make security considerations a top level section

8.6.   399 - Update JARM ref in message signing

8.7.   393 - use ticks so it doesn't end up as privatekeyjwt - fapi-2_0-message-signing.md edited online with Bitbucket

8.8.   394 - FAPI2MS: Make normative references normative

9.   Issues (Nat)

Message signing issues: https://github.com/openid/fapi/issues?q=is%3Aissue%20state%3Aopen%20label%3A%22component%3A%20FAPI2%3A%20Message%20Signing%22

  • #565 - Add privacy consideration
    • Nat to own the ticket.
  • #561 - Intro need to be fixed
    • Dave to own the ticket.
  • #479 - Change to the naming of FAPI
    • To be closed
  • #487 - RS must check x-fapi-interaction-id is an UUID or IP address
    • Implementation notes to include clarified text.
  • #558 - update filenames for grant management and CIBA
    • Dima to clarify with Mike Jones.
  • #104 - User friendly names and registration of providers
    • Closing the ticket.
  • 567 - Clause 20" does not exist any longer...
    • Closing as resolved.

10.   AOB (Nat)

  • GNAP going through WGLC.

The call adjourned at 15:00

11.   Chat Transcripts

  1. Mike Leszcz - (OpenID Foundation) to Everyone 11:05 PM https://openid.net/2023/01/08/notice-of-vote-for-proposed-second-implementers-drafts-of-two-fapi-2-0-specifications/
  2. Me to Everyone 11:05 PM https://openid.net/2023/01/08/notice-of-vote-for-proposed-second-implementers-drafts-of-two-fapi-2-0-specifications/
  3. Mike Leszcz - (OpenID Foundation) to Everyone 11:06 PM https://openid.net/foundation/calendar-of-events/
  4. Mike Leszcz - (OpenID Foundation) to Everyone 11:16 PM https://docs.google.com/document/d/1mjmqPzfRI1l0ki9qnyaSz2YwAkH54gfG8A4lJtzA0WI/edit?usp=sharing
  5. Me to Everyone 11:17 PM https://files.consumerfinance.gov/f/documents/cfpb_data-rights-rulemaking-1033-SBREFA_outline_2022-10.pdf
  6. https://files.consumerfinance.gov/f/documents/cfpb_data-rights-rulemaking-1033-SBREFA-high-level-summary-discussion-guide_2022-10.pdf
  7. Joseph Heenan (OIDF/Authlete) to Everyone 11:18 PM This was the announcement from CPFB: https://www.consumerfinance.gov/about-us/newsroom/cfpb-kicks-off-personal-financial-data-rights-rulemaking/
  8. Kosuke Koiwai to Everyone 11:30 PM more than 50 registerd to attend on site, 330 people registered to watch online
  9. Dave Tonge (Moneyhub) to Everyone 11:35 PM https://bitbucket.org/openid/fapi/pull-requests/401
  10. Dave Tonge (Moneyhub) to Everyone 11:36 PM https://bitbucket.org/openid/fapi/pull-requests/400
  11. Dave Tonge (Moneyhub) to Everyone 11:36 PM https://bitbucket.org/openid/fapi/pull-requests/398
  12. Dave Tonge (Moneyhub) to Everyone 11:37 PM https://bitbucket.org/openid/fapi/pull-requests/397
  13. Dave Tonge (Moneyhub) to Everyone 11:38 PM https://bitbucket.org/openid/fapi/pull-requests/396
  14. Dave Tonge (Moneyhub) to Everyone 11:38 PM https://bitbucket.org/openid/fapi/pull-requests/395
  15. Dave Tonge (Moneyhub) to Everyone 11:39 PM https://bitbucket.org/openid/fapi/pull-requests/399
  16. Dave Tonge (Moneyhub) to Everyone 11:39 PM https://bitbucket.org/openid/fapi/pull-requests/393
  17. Dave Tonge (Moneyhub) to Everyone 11:39 PM https://bitbucket.org/openid/fapi/pull-requests/394
  18. Joseph Heenan (OIDF/Authlete) to Everyone 11:41 PM https://github.com/openid/fapi/issues?q=is%3Aissue%20state%3Aopen%20label%3A%22component%3A%20FAPI2%3A%20Message%20Signing%22
  19. Dave Tonge (Moneyhub) to Everyone 11:41 PM https://github.com/openid/fapi/issues/565
  20. Dave Tonge (Moneyhub) to Everyone 11:43 PM https://github.com/openid/fapi/issues/561
  21. Chris Michael to Everyone 11:46 PM Hi all - sorry have to jump off now
  22. Dave Tonge (Moneyhub) to Everyone 11:46 PM https://github.com/openid/fapi/issues/479
  23. Dave Tonge (Moneyhub) to Everyone 11:48 PM https://github.com/openid/fapi/issues/487
  24. Dave Tonge (Moneyhub) to Everyone 11:53 PM https://github.com/openid/fapi/issues/558
  25. Dave Tonge (Moneyhub) to Everyone 11:55 PM https://github.com/openid/fapi/issues/104
  26. Dave Tonge (Moneyhub) to Everyone 11:56 PM https://github.com/openid/fapi/issues/567

Clone this wiki locally