Skip to content

FAPI_Meeting_Notes_2025 01 15_Atlantic

Jump to bottom
Nat Sakimura edited this page Jul 10, 2026 · 1 revision

FAPI WG Meeting Notes - January 15, 2025

Attendees

  • Dave Tonge (Chair)
  • Mike Leszcz (OIDF)
  • Joseph Heenan (OIDF & Authlete)
  • Filip Skokan
  • Brian Campbell
  • Bjorn Hjelm
  • Hideki Ikeda
  • Kosuke Koiwai
  • Peter Wallach (Mastercard)
  • Chris Wood
  • Robert Gallagher (Mastercard)
  • Peter Stanley (OBL)
  • Domingos Creado
  • Imran Ulghar (OBL)

Agenda

  1. Roll Call
  2. Adoption of Agenda
  3. Events
  4. External Orgs & Liaisons
  5. PRs
  6. Issues
  7. AOB

Notes

1. Events & External Organization Updates (Mike L.)

Upcoming Events

  • OSW 2025: Feb 26-28 in Reykjavik, Iceland
  • DICE: March 4-5 in Zurich
  • ISO/IEC JTC 1/SC 27/WG5: March 10-15, 2025 in Fairfax
  • ISO/IEC JTC 1/SC 27: March 17-18, 2025 in Fairfax
  • MOSIP Connect: March 11-13 in Philippines
  • IETF: March 15-21 in Bangkok
  • OIDF Workshop: April 7th (prior to IIW)
  • IIW Spring 2025: April 8-10

Ecosystem Updates

  • Brazil (Open Finance & Insurance): Annual FAPI recertification cycle has started
    • Expected to continue through Q1 into April
  • United Arab Emirates:
    • RP certifications are open with several entities already certified
    • OP certification test recently completed by Domingos, to be pushed to production soon

2. FAPI 2 Voting Milestones

  • Vote announcement: Saturday, January 25, 2025
  • Early voting opens: Saturday, February 1, 2025
  • Voting period: February 8-15, 2025 (7 days)

3. Pull Requests & Issues

PR #529 - Private Key JWT Audience Restriction

  • Discussion on approach for different specs:
    • For FAPI 1 errata: Decision to wait for underlying specs to be updated
    • For FAPI CIBA: Agreement that it falls back to core FAPI specifications
    • For CIBA itself: Recommendation to wait for OIDC errata rather than making piecemeal changes
  • Action: Dave to add comments to both PRs explaining the decision

Message Signing Working Last Call

  • Issue #716 discussed regarding reliance on draft OAuth 2.0 JWT Introspection Response
  • Brian confirmed the draft is progressing toward publication
  • Agreement to:
    • Proceed with the working last call process
    • Add a note in the document about the draft reference to be updated before final publication
    • Update references once RFC is published

4. Future Work Prioritization

Discussion of three main areas to focus on:

  1. FAPI CIBA
  2. HTTP Signatures
  3. Implementation & Deployment Advice

Decision: Prioritize FAPI CIBA due to:

  • Existing conformance tests
  • Potential deployment plans in Brazil
  • Relatively contained scope of remaining work

Additional topics discussed:

  • Grant Management
  • Client Registration options
  • Federation with FAPI 2
    • Need to analyze compatibility
    • Questions about interoperability profiles
    • Known implementations by:
      • Authlete
      • Connect2id
      • Radium (in progress)

Action: Gather input from implementers on Federation+FAPI 2 compatibility before considering any specification work.

Next Steps

  • Dave to prepare CIBA issues for review next week
  • Dave to follow up on collecting Federation implementation feedback
  • Working group to proceed with Message Signing working last call

Next Meeting

Next call scheduled for regular time next week.

Clone this wiki locally