diff --git a/journal/2021-04-16--12-27-13Z--iroh_auth_presentation.org b/journal/2021-04-16--12-27-13Z--iroh_auth_presentation.org index 6a5dc2ca..6559f78e 100644 --- a/journal/2021-04-16--12-27-13Z--iroh_auth_presentation.org +++ b/journal/2021-04-16--12-27-13Z--iroh_auth_presentation.org @@ -63,7 +63,7 @@ HTTP APIs. * History -Original goal: Login using AMP SAML (generate JWT) +1st goal: Login using AMP SAML (generate JWT) No DB of users! @@ -72,18 +72,18 @@ No DB of users! Become both an OAuth2 client and provider. +Need Clients/Users/Orgs in DB!!! + OAuth2 RFC => OAuth2 GRANTS -- Authorization Code Grant -- Client Grant -- Implicit Grant +- Authorization Code Grant (the classic) +- Client Grant (for scripts) +- Implicit Grant (for Single Page Applications, now deprecated) -2. OAuth2 Provider (Grants) -3. Login using OpenID Connect with TG (client of OpenID Connect) -4. Users/Orgs in DB!!! -4. Account Activation -5. Become an OpenID Connect provider -6. OIDC with SSE + +- Account Activation +- Become an OpenID Connect provider +- OIDC with SSE * Internal User Structure * Cisco specificity