xmlgrrl/UMA-Specifications — Issue #33: 3.3.1. AM Returns a Token Status Description
Author: maligree
Created: 2011-10-17 11:46:48+00:00
State: open

A reeeaaaally minor thing, not sure this is even worth an issue. And there's always the chance I missed something.

When the host inquires about the status of a token it just received, the AM answers with the associated permissions. We all (intuitively) know that the status description should only contain permissions that have meaning to this particular host.

After all, the same rat is used when interacting with different hosts that use the same AM -- e.g. host1 should not receive from the AM a description containing permissions associated with host2. I realize this is obvious, but the spec doesn't really say so:

"(..) contains all of the permissions that are currently valid for this requester access token (..)"

should perhaps be changed slightly to:

"(..) contains all of the permissions that are currently valid for this requester access token at the host in question (..)"..?