search

apis-json / api-json

APIS.json an API discovery format
http://apisjson.org/
MIT License
111 stars 23 forks source link

Review / Monitor OAuth 2.0 Resource Set Registration #22

Closed kinlane closed 2 weeks ago

kinlane commented 10 years ago

There's an effort to standardize how to declare access control scopes and protected resource sets at a fairly deep level, here:

http://tools.ietf.org/html/draft-hardjono-oauth-resource-reg-02

The UMA group that's been working on this is considering how to incorporate these detailed elements into broader declaration formats such as Swagger. Currently the info gets actively registered by a resource server at an authorization server. If you have questions on this, let me know (I chair that group).

From Eve Maler - https://groups.google.com/forum/#!topic/apisjson/s30XLjP8Q0A

kinlane commented 10 years ago

Review, and consider adding as property type.

njyx commented 10 years ago

We should definitely look at this - ideal would be if we can point to a specs built in UMA declaration. Not sure if that's feasible.