Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Intermediate nel listing endpoint #161

Open
fmarino-ipzs opened this issue Feb 15, 2023 · 5 comments
Open

Intermediate nel listing endpoint #161

fmarino-ipzs opened this issue Feb 15, 2023 · 5 comments

Comments

@fmarino-ipzs
Copy link
Collaborator

Valutare se aggiungere il valore intermediate nel listing edpoint. Attualmente non abbiamo intermediate come tipo di entità.

@peppelinux
Copy link
Member

in https://openid.net/specs/openid-connect-federation-1_0.html#section-7.3.1

we don't have any metadata type "intermediate"

The metadata type are defined in https://openid.net/specs/openid-connect-federation-1_0.html#section-4
we have federation_entity but not intermediate

@damikael
Copy link
Member

I suggest to keep:

entity_type: {
     federation_entity, 
     openid_provider, 
     relying_party, 
     oauth_resource, 
     oauth_autorization_server
}

and to define:

entity_role: {
     anchor, 
     intermediate, 
     leaf
}

and use both either for trust mark and on the listing endpoint

For example:
/list?entity_type=federation_entity&entity_role=intermediate

@peppelinux
Copy link
Member

entity_role=anchor is not coerent with entity_type=rp

the best solution would be

is_leaf=false, as it was in draft 22

@damikael
Copy link
Member

damikael commented Feb 15, 2023

Or, it could be:

entity_role: {
     intermediate,
     leaf
}

So we can use entity_type + entity_role for trust_mark

@peppelinux
Copy link
Member

OpenID Federation has introduced the parameter intermerdiate in the list endpoint

https://openid.net/specs/openid-federation-1_0.html#name-subordinate-listing-request

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants