SkygearIO / features

Feature Tracking Repo for Skygear

Apache License 2.0

3 stars 12 forks source link

Implement Basic OP profile of OpenID Connect #413

Open louischan-oursky opened 4 years ago

louischan-oursky commented 4 years ago

Description

Conform to the Basic OP profile of OpenID Connect

[ ] Introduce authorization per API Client per client
[ ] Define the list of supported scopes
[ ] Support removing authorization. Removal should invalidate all sessions
[ ] Authorization should remember requested scopes and authorized scopes. Authorized scopes can be updated.
[ ] Implement the UserInfo endpoint
[ ] Respect authorized scopes in the UserInfo endpoint

Blog Post Specification

Blog Post of the Feature Release

Open Questions

Put a list of open questions here before a complete design / specification is decided

Related Issues

Server Issues
Client Issues
Guides Issues