search

KantaraInitiative / wg-uma

This is the repository of all specifications related to the User Managed Access Group
http://kantarainitiative.org/confluence/display/uma/
Other
27 stars 21 forks source link

Permission endpoint request implies array cannot be used for single resource identifier #339

Closed mrpotes closed 6 years ago

mrpotes commented 6 years ago

Section 4.1 states that:

The body of the HTTP request message contains a JSON object (for a request containing a single resource identifier) or array of objects (for a request containing more than one resource identifier)

The statement of for a request containing more than one resource identifier for an array seems to restrict the resource server to having to use the object form if it only has one resource identifier, but switch to the array form only when it has more than one. This seems overly complicated for the resource server, and it would seem reasonable to instead say for a request containing one or more resource identifiers for the array, allowing the RS to choose what payload structure it sends.

xmlgrrl commented 6 years ago

For completeness's sake, noting that UMA telecon 2017-08-07 decided this issue.