search

w3c / wot-security

a repo exclusively for security to better manage issues and security considerations for WoT
https://w3c.github.io/wot-security/
18 stars 22 forks source link

Consider making order meaningful in "oneOf" combo scheme #193

Open mmccool opened 3 years ago

mmccool commented 3 years ago

The "oneOf" combo scheme lists sub-schemes in an array. This issue proposes that we make the order meaningful by adding an assertion to the TD spec that consumers SHOULD implement schemes earlier in the list if possible.

mmccool commented 3 years ago

During the TPAC meeting @relu91 mentioned "formIndex" and maybe we should add "securityIndex". The "formIndex" is used in scripting to access/select the order of forms. However, if the runtime of the consumer implementation "automatically" does security, it might be better to just have that implementation always try to access security in order, starting with the first. There may be no reason to expose this at the scripting API level.