Subject: [oauth-ext-review] Request to update existing registrations and add 3 new registrations in the OAuth Parameters registry

From: Mike Jones <[email-masked]>
Date: Thu, 24 Jul 2014 14:39:01 +0000

Dear designated experts and IANA,

I am writing to you on behalf of the OpenID Connect Artifact Binding working group requesting two registration actions.

1.  The OpenID Foundation Artifact Binding Working Group has a number of registered parameters in the OAuth Parameters registry at http://www.iana.org/assignments/oauth-parameters/oauth-parameters.xhtml.  Since the initial registration, the OpenID Connect specifications were restructured and are now final.  In particular, the definitions formerly in http://openid.net/specs/openid-connect-messages-1_0.html has been moved mostly to http://openid.net/specs/openid-connect-core-1_0.html and in one case, to http://openid.net/specs/openid-connect-session-1_0.html.  Thus, the registered references need to be updated.  Therefore, please replace every occurrence of http://openid.net/specs/openid-connect-messages-1_0.html with http://openid.net/specs/openid-connect-core-1_0.html, other than the reference for the "session_state" parameter, for which the correct replacement is http://openid.net/specs/openid-connect-session-1_0.html.

2.  Also, since the initial registration in August 2013, three additional errors were defined.  Please add these three additional errors to the OAuth Extensions Error Registry:

*        Error name: request_not_supported
*        Error usage location: Authorization Endpoint
*        Related protocol extension: OpenID Connect
*        Change controller: OpenID Foundation Artifact Binding Working Group - [email-masked]
*        Specification document(s): http://openid.net/specs/openid-connect-core-1_0.html

*        Error name: request_uri_not_supported
*        Error usage location: Authorization Endpoint
*        Related protocol extension: OpenID Connect
*        Change controller: OpenID Foundation Artifact Binding Working Group - [email-masked]
*        Specification document(s): http://openid.net/specs/openid-connect-core-1_0.html

*        Error name: registration_not_supported
*        Error usage location: Authorization Endpoint
*        Related protocol extension: OpenID Connect
*        Change controller: OpenID Foundation Artifact Binding Working Group - [email-masked]
*        Specification document(s): http://openid.net/specs/openid-connect-core-1_0.html

The original registration response is included below, for your reference, should it be helpful to you.

                                                            Thank you,
                                                            -- Mike

-----Original Message-----
From: Amanda Baber via RT [mailto:[email-masked]]
Sent: Wednesday, August 28, 2013 1:09 AM
To: [email-masked]; Mike Jones
Subject: [IANA #705420] Re: [oauth-ext-review] Registration of OAuth parameters and errors

Dear Mike,

This request is complete. Please see

http://www.iana.org/assignments/oauth-parameters

Best regards,

Amanda Baber

IANA Request Specialist

ICANN

On Fri Aug 23 11:23:31 2013, [email-masked]<mailto:[email-masked]> wrote:

> Dear IANA,

> I read through the request and it aims to register values to these two

> OAuth registries:

> * OAuth Parameters Registry

> * OAuth Extensions Error Registry

> These OAuth registries can be found here:

> http://www.iana.org/assignments/oauth-parameters/oauth-

> parameters.xhtml

> Both of these registries have the policy "specification required" and

> (publically accessible) specifications are available for the listed

> values.

> The indicated values do not conflict with any of the already

> registered values.

> Hence, I approve the request.

> Ciao

> Hannes

> On 07/31/2013 06:09 PM, Mike Jones wrote:

> > This is a request to register the OAuth parameters defined at

> > http://openid.net/specs/openid-connect-messages-

> 1_0.html#ParametersContents

> > and at

> > http://openid.net/specs/openid-connect-session-

> 1_0.html#ParametersContents

> > in the OAuth Parameters Registry defined in RFC 6749 to register the

> > OAuth errors defined at

> > http://openid.net/specs/openid-connect-messages-

> 1_0.html#ErrorContents

> > in the OAuth Extensions Error Registry also defined in RFC 6749.

> The

> > individual registration requests follow.

> >                                                              Thank

> you,

> >                                                              -- Mike

> > *OAuth Parameters Registry Requests*

> > *Parameter name: nonce

> > *Parameter usage location: Authorization Request

> > *Change controller: OpenID Foundation Artifact Binding Working Group

> -

> > [email-masked]<mailto:[email-masked]>

> > *Specification document(s):

> > http://openid.net/specs/openid-connect-messages-1_0.html

> > *Related information: None

> > *Parameter name: display

> > *Parameter usage location: Authorization Request

> > *Change controller: OpenID Foundation Artifact Binding Working Group

> -

> > [email-masked]<mailto:[email-masked]>

> > *Specification document(s):

> > http://openid.net/specs/openid-connect-messages-1_0.html

> > *Related information: None

> > *Parameter name: prompt

> > *Parameter usage location: Authorization Request

> > *Change controller: OpenID Foundation Artifact Binding Working Group

> -

> > [email-masked]<mailto:[email-masked]>

> > *Specification document(s):

> > http://openid.net/specs/openid-connect-messages-1_0.html

> > *Related information: None

> > *Parameter name: max_age

> > *Parameter usage location: Authorization Request

> > *Change controller: OpenID Foundation Artifact Binding Working Group

> -

> > [email-masked]<mailto:[email-masked]>

> > *Specification document(s):

> > http://openid.net/specs/openid-connect-messages-1_0.html

> > *Related information: None

> > *Parameter name: ui_locales

> > *Parameter usage location: Authorization Request

> > *Change controller: OpenID Foundation Artifact Binding Working Group

> -

> > [email-masked]<mailto:[email-masked]>

> > *Specification document(s):

> > http://openid.net/specs/openid-connect-messages-1_0.html

> > *Related information: None

> > *Parameter name: claims_locales

> > *Parameter usage location: Authorization Request

> > *Change controller: OpenID Foundation Artifact Binding Working Group

> -

> > [email-masked]<mailto:[email-masked]>

> > *Specification document(s):

> > http://openid.net/specs/openid-connect-messages-1_0.html

> > *Related information: None

> > *Parameter name: id_token_hint

> > *Parameter usage location: Authorization Request

> > *Change controller: OpenID Foundation Artifact Binding Working Group

> -

> > [email-masked]<mailto:[email-masked]>

> > *Specification document(s):

> > http://openid.net/specs/openid-connect-messages-1_0.html

> > *Related information: None

> > *Parameter name: login_hint

> > *Parameter usage location: Authorization Request

> > *Change controller: OpenID Foundation Artifact Binding Working Group

> -

> > [email-masked]<mailto:[email-masked]>

> > *Specification document(s):

> > http://openid.net/specs/openid-connect-messages-1_0.html

> > *Related information: None

> > *Parameter name: acr_values

> > *Parameter usage location: Authorization Request

> > *Change controller: OpenID Foundation Artifact Binding Working Group

> -

> > [email-masked]<mailto:[email-masked]>

> > *Specification document(s):

> > http://openid.net/specs/openid-connect-messages-1_0.html

> > *Related information: None

> > *Parameter name: claims

> > *Parameter usage location: Authorization Request

> > *Change controller: OpenID Foundation Artifact Binding Working Group

> -

> > [email-masked]<mailto:[email-masked]>

> > *Specification document(s):

> > http://openid.net/specs/openid-connect-messages-1_0.html

> > *Related information: None

> > *Parameter name: registration

> > *Parameter usage location: Authorization Request

> > *Change controller: OpenID Foundation Artifact Binding Working Group

> -

> > [email-masked]<mailto:[email-masked]>

> > *Specification document(s):

> > http://openid.net/specs/openid-connect-messages-1_0.html

> > *Related information: None

> > *Parameter name: request

> > *Parameter usage location: Authorization Request

> > *Change controller: OpenID Foundation Artifact Binding Working Group

> -

> > [email-masked]<mailto:[email-masked]>

> > *Specification document(s):

> > http://openid.net/specs/openid-connect-messages-1_0.html

> > *Related information: None

> > *Parameter name: request_uri

> > *Parameter usage location: Authorization Request

> > *Change controller: OpenID Foundation Artifact Binding Working Group

> -

> > [email-masked]<mailto:[email-masked]>

> > *Specification document(s):

> > http://openid.net/specs/openid-connect-messages-1_0.html

> > *Related information: None

> > *Parameter name: id_token

> > *Parameter usage location: Authorization Response, Access Token

> Response

> > *Change controller: OpenID Foundation Artifact Binding Working Group

> -

> > [email-masked]<mailto:[email-masked]>

> > *Specification document(s):

> > http://openid.net/specs/openid-connect-messages-1_0.html

> > *Related information: None

> > *Parameter name: session_state

> > *Parameter usage location: Authorization Response, Access Token

> Response

> > *Change controller: OpenID Foundation Artifact Binding Working Group

> -

> > [email-masked]<mailto:[email-masked]>

> > *Specification document(s):

> > http://openid.net/specs/openid-connect-session-1_0.html

> > *Related information: None

> > *OAuth Extensions Error Registry Requests*

> > *Error name: interaction_required

> > *Error usage location: Authorization Endpoint

> > *Related protocol extension: OpenID Connect

> > *Change controller: OpenID Foundation Artifact Binding Working Group

> -

> > [email-masked]<mailto:[email-masked]>

> > *Specification document(s):

> > http://openid.net/specs/openid-connect-messages-1_0.html

> > *Error name: login_required

> > *Error usage location: Authorization Endpoint

> > *Related protocol extension: OpenID Connect

> > *Change controller: OpenID Foundation Artifact Binding Working Group

> -

> > [email-masked]<mailto:[email-masked]>

> > *Specification document(s):

> > http://openid.net/specs/openid-connect-messages-1_0.html

> > *Error name: session_selection_required

> > *Error usage location: Authorization Endpoint

> > *Related protocol extension: OpenID Connect

> > *Change controller: OpenID Foundation Artifact Binding Working Group

> -

> > [email-masked]<mailto:[email-masked]>

> > *Specification document(s):

> > http://openid.net/specs/openid-connect-messages-1_0.html

> > *Error name: consent_required

> > *Error usage location: Authorization Endpoint

> > *Related protocol extension: OpenID Connect

> > *Change controller: OpenID Foundation Artifact Binding Working Group

> -

> > [email-masked]<mailto:[email-masked]>

> > *Specification document(s):

> > http://openid.net/specs/openid-connect-messages-1_0.html

> > *Error name: invalid_request_uri

> > *Error usage location: Authorization Endpoint

> > *Related protocol extension: OpenID Connect

> > *Change controller: OpenID Foundation Artifact Binding Working Group

> -

> > [email-masked]<mailto:[email-masked]>

> > *Specification document(s):

> > http://openid.net/specs/openid-connect-messages-1_0.html

> > *Error name: invalid_request_object

> > *Error usage location: Authorization Endpoint

> > *Related protocol extension: OpenID Connect

> > *Change controller: OpenID Foundation Artifact Binding Working Group

> -

> > [email-masked]<mailto:[email-masked]>

> > *Specification document(s):

> > http://openid.net/specs/openid-connect-messages-1_0.html

> > _______________________________________________

> > oauth-ext-review mailing list

> > [email-masked]<mailto:[email-masked]>

> > https://www.ietf.org/mailman/listinfo/oauth-ext-review