Dear OAuth Community, I drafted an article on how OAuth grants could be expressed in generic PDPs that are not aware of OAuth:
https://adedov.github.io/articles/oauth-meets-pdp/ The main idea is to represent delegated authorization via synthetic principals and ordinary authorization policies. The article covers persisted user grants, tenant-wide administrative consent, and token-contained scopes translated into ephemeral policies. It also contains some clues for future research. I would highly appreciate your expert feedback, and I hope this work will be helpful to anyone tackling similar tasks. -- Anton Dedov
_______________________________________________ OAuth mailing list -- [email protected] To unsubscribe send an email to [email protected]
