Hi, How can I unsubscribe to the message. Please advise.

From: Architecture [mailto:[email protected]] On Behalf Of Roshan 
Wijesena
Sent: Monday, June 6, 2016 2:34 PM
To: Geesara Prathap <[email protected]>
Cc: architecture <[email protected]>
Subject: Re: [Architecture] Behavior of OAuth 2.0 Dynamic Client Registration

On Mon, Jun 6, 2016 at 11:27 AM, Geesara Prathap 
<[email protected]<mailto:[email protected]>> wrote:
Yes, It should be. We should use the same endpoint in order to create and 
update  an OAuth application.


Well, its depends on your implementation and auth server. I believe it is not 
necessary to  use same endpoint templates. Different vendors use different ways 
to implement their DCR endpoints.  For example, consider below endpoints for 
creating and update. This has been used in MIT auth server's DCR 
implementation.[1]


For creating (POST)


http://localhost:8080/openid-connect-server-webapp/register


Payload


{
"application_type":"web",
       "redirect_uris": [
           "http://10.100.0.13:8080/simple-web-app/openid_connect_login";
       ],
       "client_name": "Simple Web App"
}


For the update (PUT).


http://localhost:8080/openid-connect-server-webapp/register/4547fc03-a6f3-4641-8e1f-84eb13093e5c


{

client_name: "Changed App",
client_id: "4547fc03-a6f3-4641-8e1f-84eb13093e5c",
"redirect_uris": [
   "http://10.100.0.13:8080/simple-web-app/openid_connect_login";
]}

[1] https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server

@maneesha,

is it possible to share two payloads that you have used in create and update 
endpoints?


Regards
Roshan

--
Roshan Wijesena.
Senior Software Engineer-WSO2 Inc.
Mobile: +94719154640
Email: [email protected]<mailto:[email protected]>
WSO2, Inc. : wso2.com<http://wso2.com/>
lean.enterprise.middleware.
_______________________________________________
Architecture mailing list
[email protected]
https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture

Reply via email to