You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: draft-ietf-oauth-status-list.md
+25-1Lines changed: 25 additions & 1 deletion
Original file line number
Diff line number
Diff line change
@@ -830,6 +830,25 @@ An Issuer MAY support any of these mechanisms:
830
830
- Issuer metadata: The Issuer of the Referenced Token publishes an URI which links to Status List Aggregation, e.g. in publicly available metadata of an issuance protocol
831
831
- Status List Parameter: The Status Issuer includes an additional claim in the Status List Token that contains the Status List Aggregation URI.
│ Status List Token │◄┴────────┴──┤ Status List Aggregation │
845
+
│ │┘ │ │
846
+
└───────┬───────────┘ └─────────────────────────┘
847
+
│ ▲
848
+
│ link by aggregation_uri │
849
+
└─────────────────────────────────┘
850
+
~~~
851
+
833
852
## Issuer Metadata
834
853
835
854
The Issuer MAY link to the Status List Aggregation URI in metadata that can be provided by different means like .well-known metadata as is used commonly in OAuth and OpenID or via a VICAL extension for ISO mDoc / mDL. If the Issuer is an OAuth Authorization Server according to {{RFC6749}}, it is RECOMMENDED to use `status_list_aggregation_endpoint` for its metadata defined by {{RFC8414}}.
@@ -1070,7 +1089,7 @@ The storage and transmission size of the Status Issuer's Status List Tokens depe
1070
1089
1071
1090
The Status List Issuer may increase the size of a Status List if it requires indices for additional Referenced Tokens. It is RECOMMENDED that the size of a Status List in bits is divisible in bytes (8 bits) without a remainder, i.e. `size-in-bits` % 8 = 0.
1072
1091
1073
-
The Status List Issuer may chunk its Referenced Tokens into multiple Status Lists to reduce the transmission size of an individual Status List Token. This may be useful for setups where some entities operate in constrained environments, e.g. for mobile internet or embedded devices. The Status List Issuer may chunk the Status List Tokens depending on the Referenced Token's expiry date to align their lifecycles and allow for easier retiring of Status List Tokens, however the Status Issuer must be aware of possible privacy risks due to correlations.
1092
+
The Status List Issuer may divide its Referenced Tokens up into multiple Status Lists to reduce the transmission size of an individual Status List Token. This may be useful for setups where some entities operate in constrained environments, e.g. for mobile internet or embedded devices. The Status List Issuer may organize the Status List Tokens depending on the Referenced Token's expiry date to align their lifecycles and allow for easier retiring of Status List Tokens, however the Status Issuer must be aware of possible privacy risks due to correlations.
1074
1093
1075
1094
## External Status Issuer
1076
1095
@@ -1799,6 +1818,11 @@ CBOR encoding:
1799
1818
# Document History
1800
1819
{:numbered="false"}
1801
1820
1821
+
-09
1822
+
1823
+
* add diagram for Status List Aggregation for further explanation
1824
+
* rename "chunking" of Status List Tokens (for scalability reasons) into "divide .. up"
0 commit comments