From 47f11033808d99bf6e67f1fa506064b1ce304210 Mon Sep 17 00:00:00 2001 From: "Yann Esposito (Yogsototh)" Date: Fri, 16 Apr 2021 14:42:45 +0200 Subject: [PATCH] journal/2021-04-16--12-27-13Z--iroh_auth_presentation.org --- ...-16--12-27-13Z--iroh_auth_presentation.org | 20 +++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/journal/2021-04-16--12-27-13Z--iroh_auth_presentation.org b/journal/2021-04-16--12-27-13Z--iroh_auth_presentation.org index 6a5dc2ca..6559f78e 100644 --- a/journal/2021-04-16--12-27-13Z--iroh_auth_presentation.org +++ b/journal/2021-04-16--12-27-13Z--iroh_auth_presentation.org @@ -63,7 +63,7 @@ HTTP APIs. * History -Original goal: Login using AMP SAML (generate JWT) +1st goal: Login using AMP SAML (generate JWT) No DB of users! @@ -72,18 +72,18 @@ No DB of users! Become both an OAuth2 client and provider. +Need Clients/Users/Orgs in DB!!! + OAuth2 RFC => OAuth2 GRANTS -- Authorization Code Grant -- Client Grant -- Implicit Grant +- Authorization Code Grant (the classic) +- Client Grant (for scripts) +- Implicit Grant (for Single Page Applications, now deprecated) -2. OAuth2 Provider (Grants) -3. Login using OpenID Connect with TG (client of OpenID Connect) -4. Users/Orgs in DB!!! -4. Account Activation -5. Become an OpenID Connect provider -6. OIDC with SSE + +- Account Activation +- Become an OpenID Connect provider +- OIDC with SSE * Internal User Structure * Cisco specificity