search

solid / authentication-panel

GitHub repository for the Solid Authentication Panel
MIT License
11 stars 15 forks source link

Clarify use of Bearer token #72

Closed elf-pavlik closed 3 years ago

elf-pavlik commented 3 years ago

https://github.com/solid/authentication-panel/blob/master/oidc-authentication.md#resource-access

Ephemeral clients MUST use DPoP-bound Access Tokens, however, the RS MAY allow registered clients to access resources using a traditional Bearer tokens.

I don't see how RS would know if client registered with OP or not. If don't make DynReg optional for the client #56 than all clients will be actually registered. Even if client is registered with OP I don't think this on its own enables it to use Bearer tokens.

elf-pavlik commented 3 years ago

Latest draft doesn't include use of Bearer tokens any more.