FAPI_Meeting_Notes_2024 07 11_Pacific

FAPI WG Agenda & Meeting Notes (2024-07-11)

Date & Time: 2024-07-12 00:00 UTC Location: https://zoom.us/j/97456084642?pwd=bTRFVzk4ZmlRK1M3bEprRlN5c3JFZz09

Agenda

• 1.   Roll Call (Anoop)
• 2.   Events Update
  • 2.1.   OIDF Workshop Fall
  • 2.2.   2025 Events
  • 2.3.   OIDF calendar
• 3.   Liaison/Ext Org
• 4.   Issues & PRs
  • 4.1.   Issue #682 / PR# 505
• 5.   Review of PRs and Issues
  • 5.1.   PR 502 (Access token privilege restriction):
  • 5.2.   PR 504 (CORS wording):
  • 5.3.   PR 503:
  • 5.4.   Issue #692
• 6.   Misc
• 7.   Next Call

The meeting was called to order at 00:00 UTC.

1.   Roll Call (Anoop)

• Attendees: Nat, Mark, Dima, Ralph, Ed, Michal, Anoop
• Regrets:

2.   Events Update

2.1.   OIDF Workshop Fall

• OIDF workshop in the Mountain View area on Monday, October 28th prior to IIW. Location yet to be determined.

2.2.   2025 Events

Planning for 2025 events and update of OIDF calendar

Send 2025 events information to mike.leszcz@oidf.org

2.3.   OIDF calendar

OIDF calendar on website is current: https://openid.net/calendar/

3.   Liaison/Ext Org

NA

4.   Issues & PRs

4.1.   Issue #682 / PR# 505

https://bitbucket.org/openid/fapi/branch/issue-694

RT rotation alternative wording (https://bitbucket.org/openid/fapi/pull-requests/505)

Possible votes:

Shall support refresh token rotation Should support refresh token rotation Shall WG describe how refresh token rotation works Shall implementation specify how rotation works Should not support refresh token rotation for reasons including interoperability, but if supported, it is up to the ecosystems/implementations to specify how

Add options to the issue for further discussion

Final list of Options - https://lists.openid.net/pipermail/openid-specs-fapi/2024-July/003150.html and posted in WG news. Voting will start soon and due by 17th July. Ralhp to add few implementation guidance on each option of voters education.

5.   Review of PRs and Issues

5.1.   PR 502 (Access token privilege restriction):

Approved

5.2.   PR 504 (CORS wording):

Approved pending no objections

5.3.   PR 503:

Looks good, needs more review

5.4.   Issue #692

New Issue #692 - https://github.com/openid/fapi/issues/692 Briefly discussed .. Please review and provide feedback/comments on the issue. This will be discussed in Atlantic call next. It has dependency on FAPI 2 final spec and hence the urgency.

6.   Misc

7.   Next Call

Next call will be an Pacific Call. Next Pacific call will be in two weeks (07-25-2024 @ 5pm PST) UTC - 07-26-2024 1:00 AM.