Draft: draft-ietf-gnap-resource-servers

Commentary: Deploy Preview for gnap - resource - servers - editors - draft ready ! Explore the source changes : Inspect the deploy log : Browse the preview :
Paragraph (version A):
OPTIONAL.  The URL of the endpoint offering introspection.  The
location MUST be a URL RFC3986 with a scheme component that MUST
be https, a host component, and optionally, port, path and query
components and no fragment components.
Paragraph (version A):
A list of token formats supported by this AS.  The values in this
list MUST be registered in the GNAP Token Format Registry.
Paragraph (version A):
The URL of the endpoint offering resource registration.  The
location MUST be a URL RFC3986 with a scheme component that MUST
be https, a host component, and optionally, port, path and query
components and no fragment components.
Paragraph (version A):
REQUIRED.  The location of the AS's grant request endpoint, used
by the RS to derive downstream access tokens.  The location MUST
be a URL RFC3986 with a scheme component that MUST be https, a
host component, and optionally, port, path and query components
and no fragment components.  This URL MUST be the same URL used by
client instances in support of GNAP requests.
Paragraph (version A):
OPTIONAL.  A list of the AS's supported key proofing mechanisms.
The values of this list correspond to possible values of the
"proof" field of the key section of the request.
Paragraph (version A):
REQUIRED.  The access token value presented to the RS by the
client instance.
Paragraph (version A):
RECOMMENDED.  The proofing method used by the client instance to
bind the token to the RS request.
Paragraph (version A):
OPTIONAL.  The minimum access rights required to fulfill the
request.  This MUST be in the format described in the Resource
Access Rights section of I-D.ietf-gnap-core-protocol.
Paragraph (version A):
REQUIRED.  If "true", the access token presented is active, as
defined above.  If any of the criteria for an active token are not
true, or if the AS is unable to make a determination (such as the
token is not found), the value is set to "false" and other fields
are omitted.
Paragraph (version A):
REQUIRED.  The access rights associated with this access token.
This MUST be in the format described in the Resource Access Rights
section of I-D.ietf-gnap-core-protocol.  This array MAY be
filtered or otherwise limited for consumption by the identified
RS, including being an empty array.
Paragraph (version A):
REQUIRED if the token is bound.  The key bound to the access
token, to allow the RS to validate the signature of the request
from the client instance.  If the access token is a bearer token,
this MUST NOT be included.
Paragraph (version A):
OPTIONAL.  The set of flags associated with the access token.
Paragraph (version A):
REQUIRED.  The list of access rights associated with the request
in the format described in the "Resource Access Rights" section of
I-D.ietf-gnap-core-protocol.
Paragraph (version A):
OPTIONAL.  The token format required to access the identified
resource.  If the field is omitted, the token format is at the
discretion of the AS.  If the AS does not support the requested
token format, the AS MUST return an error to the RS.
Paragraph (version A):
OPTIONAL.  If present and set to "true", the RS expects to make a
token introspection request as described in introspection.  If
absent or set to "false", the RS does not anticipate needing to
make an introspection request for tokens relating to this resource
set.
Paragraph (version A):
REQUIRED.  A single string representing the list of resources
registered in the request.  The RS MAY make this handle available
to a client instance as part of a discovery response as described
in I-D.ietf-gnap-core-protocol or as documentation to client
software developers.
Paragraph (version A):
OPTIONAL.  An instance identifier that the RS can use to refer to
itself in future calls to the AS, in lieu of sending its key by
value.
Paragraph (version A):
OPTIONAL.  The introspection endpoint of this AS, used to allow
the RS to perform token introspection.