search

camaraproject / IdentityAndConsentManagement

Repository to describe, develop, document and test the Identity And Consent Management for CAMARA APIs
Apache License 2.0
18 stars 30 forks source link

`securitySchemas` and `security` of CAMARA APIs should reside in the API specification as it is part of API lifecycle #96

Closed sfnuser closed 5 months ago

sfnuser commented 6 months ago

Problem description As discussed in this issue earlier, securitySchemas and security details should be with the API specification as it is part of the API lifecycle. The current short term proposal of using .well_known definition (as agreed in the TSC) needs to be revisited.

Expected action API specification should include all the possible security flows applicable for an API endpoint.

Additional context As discussed in https://github.com/camaraproject/IdentityAndConsentManagement/issues/57, we need to address this issue at the earliest as the changes affect all the CAMARA APIs

jpengar commented 6 months ago

As mentioned in https://github.com/camaraproject/IdentityAndConsentManagement/issues/57#issuecomment-1856298543, as per TSC 07/12 meeting conclusion, securitySchemas and security agreed solution in #57 will not be re-discussed again.

jpengar commented 5 months ago

As per above, I then propose to close this issue.