Skip to content

Commit 43f7598

Browse files
committed
Atul's comments addressed
Atul's comments addressed
1 parent 2ec583a commit 43f7598

File tree

1 file changed

+10
-5
lines changed

1 file changed

+10
-5
lines changed

openid-sharedsignals-framework-1_0.md

Lines changed: 10 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -552,18 +552,23 @@ TODO: consider adding a IANA Registry for metadata, similar to Section 7.1.1 of
552552
{{RFC8414}}. This would allow other specs to add to the metadata.
553553

554554
### Authorization scheme {#authorization-scheme}
555-
SSF is an HTTP based signals sharing framework. It is agnostic to the authentication and authorization schemes used to secure stream configuration APIs. It does not provide any SSF specific authentication and authorization schemes but relies on the cooperating parties mutual security considerations. Authorization scheme section of the metadata, providers discovery information related to the transmitter's stream management APIs.
555+
SSF is an HTTP based signals sharing framework. It is agnostic to the authentication and authorization schemes used to secure stream configuration APIs. It does not provide any SSF specific authentication and authorization schemes but relies on the cooperating parties' mutual security considerations. Authorization scheme section of the metadata, providers discovery information related to the transmitter's stream management APIs.
556556

557557
spec_urn
558558

559559
> REQUIRED. A URN that describes the specification of the protocol being used.
560560

561561
The receiver will call the transmitter APIs by providing appropriate credentials as per the `spec_urn`.
562562

563+
The following is a non-normative example of the `spec_urn`
563564

564-
If the `spec_urn` in Authorization scheme is `urn:ietf:rfc6749`
565+
~~~ json
566+
{
567+
"spec_urn": "urn:ietf:rfc:6749"
568+
}
569+
~~~
565570

566-
- The receiver may obtain an access token using the Client
571+
In this case, the receiver may obtain an access token using the Client
567572
Credential Grant {{CLIENTCRED}}, or any other method suitable for the Receiver and the
568573
Transmitter.
569574

@@ -1452,9 +1457,9 @@ Errors are signaled with HTTP status codes as follows:
14521457

14531458
Examples:
14541459

1455-
1. If a Receiver makes a request with an invalid token, then the
1460+
1. If a Receiver makes a request with an improper authorization, then the
14561461
Transmitter MUST respond with a 401 error status.
1457-
2. If the Receiver presents a valid token, but the Transmitter policy
1462+
2. If the Receiver presents a valid authorization, but the Transmitter policy
14581463
does not permit the Receiver from obtaining the status, then the Transmitter
14591464
MAY respond with a 403 error status.
14601465
3. If the Receiver requests the status for a stream that does not exist then the

0 commit comments

Comments
 (0)