We had an OAuth interim meeting a few weeks back on the topic of AI agent authorization flows, discussing Dick's draft which is addressing that need. At the time, there was interest raised around solutions for this problem which can be done using an OAuth extension (namely, via a new grant flow), rather than a totally new protocol.
In response to this interest, myself and Pat White revived our prior draft on this topic, filled out significant details, and we have just submitted: https://www.ietf.org/archive/id/draft-rosenberg-oauth-aauth-02.html There is a brief overview which I think gets the general idea across ( https://www.ietf.org/archive/id/draft-rosenberg-oauth-aauth-02.html#name-brief-overview-of-operation ) . This also has a section which compares this with Dick's document. I'll be in SF and am interested if there is community interest in pursuing a solution like this. Thx, Jonathan R. -- Jonathan Rosenberg, Ph.D. [email protected] http://www.jdrosen.net
_______________________________________________ OAuth mailing list -- [email protected] To unsubscribe send an email to [email protected]
