Draft: draft-ietf-gnap-core-protocol

Commentary: To edit notification comments on pull requests , go to your .
Paragraph (version A):
If the AS determines that the request cannot be issued for any
reason, it responds to the client instance with an "error" response.
Paragraph (version B):
Additional error codes can be defined in the IANA-error-code.
Paragraph (version B):
If an error is returned and the client instance can continue, the AS
MAY include the "continue" field in the response, as defined
response-continue.  This allows the client instance to modify its
request for access, potentially leading to prompting the RO again.
Other fields MUST NOT be included in the response.
Paragraph (version A):
The "hash_method" value MUST be one of the hash name strings defined
in the IANA Named Information Hash Algorithm Registry [7].
Paragraph (version B):
The "hash_method" value MUST be one of the hash name strings defined
in the IANA Named Information Hash Algorithm Registry [1].
Paragraph (version B):
If the AS determines that the client instance can make a further
continuation request, the AS MUST include a new response-continue.
The new "continue" response MUST include a continuation access token
as well, and this token SHOULD be a new access token, invalidating
the previous access token.  If the AS does not return a new
"continue" response, the client instance MUST NOT make an additional
continuation request.  If a client instance does so, the AS MUST
return an "invalid_continuation" error.
Paragraph (version B):
state, the response MAY contain any newly-created response-token or
newly-released response-subject.  The response MAY contain a new
response-continue as described above.  The response SHOULD NOT
contain any response-interact.
Paragraph (version B):
In this example, the AS includes the "continue" field in the
response.  Therefore, the client instance can continue the grant
negotiation process, perhaps modifying the request as discussed in
continue-modify.
Paragraph (version A):
Additional security considerations apply when [rotating
keys]{#security-key-rotation}.
Paragraph (version B):
Additional security considerations apply when security-key-rotation.
Paragraph (version A):
implementation by David Skyberg.  https://github.com/dskyberg/gnap
[16].  Prototype implementation of AS and Client in Rust.  MIT
license.
Paragraph (version A):
from Interledger Foundation. https://github.com/interledger/rafiki
[17] Production implementation of AS in JavaScript.  Apache 2.0
license.
Paragraph (version A):
implementation by Aaron Pareckit. https://github.com/aaronpk/gnap-
client-php [18] Prototype implementation of web application client
and CLI client in PHP, with common support library.  CC0 license.
Paragraph (version A):
from SUNET. https://github.com/SUNET/sunet-auth-server [19]
Production implementation of AS in Python.  BSD license.
Paragraph (version A):
from Bespoke Engineering, implementation by Justin Richer.
https://github.com/bspk/oauth.xyz-java [20].  Advanced prototype
implementation of AS, Client, and RS in Java, with common support
library.  Prototype implementation of SPA Client in pure JavaScript.
Apache 2.0 license.
Paragraph (version B):
implementation by David Skyberg.  https://github.com/dskyberg/gnap
[2].  Prototype implementation of AS and Client in Rust.  MIT
license.
Paragraph (version B):
from Interledger Foundation. https://github.com/interledger/rafiki
[3] Production implementation of AS in JavaScript.  Apache 2.0
license.
Paragraph (version B):
implementation by Aaron Pareckit. https://github.com/aaronpk/gnap-
client-php [4] Prototype implementation of web application client and
CLI client in PHP, with common support library.  CC0 license.
Paragraph (version B):
from SUNET. https://github.com/SUNET/sunet-auth-server [5] Production
implementation of AS in Python.  BSD license.
Paragraph (version B):
from Bespoke Engineering, implementation by Justin Richer.
https://github.com/bspk/oauth.xyz-java [6].  Advanced prototype
implementation of AS, Client, and RS in Java, with common support
library.  Prototype implementation of SPA Client in pure JavaScript.
Apache 2.0 license.