Re: [OAUTH-WG] Proposal for new OAuth authorization grant

2022-12-23 Thread David Chadwick
Yes, I already proposed this to the OpenID4VCs working group. You can see my proposal here https://bitbucket.org/openid/connect/issues/1542/support-for-fido-authentication This proposes two new authorization grant types of "FIDO Registration" and "FIDO

Re: [OAUTH-WG] Proposal for new OAuth authorization grant

2022-12-23 Thread Warren Parad
I didn't think this all the way through, but my immediate thought is, doesn't the JWT Bearer directly support this already: https://www.rfc-editor.org/rfc/rfc7523 It's not an exact match but I believe most if not all of it follows pretty well. If it doesn't, it might be interesting to improve the

[OAUTH-WG] Proposal for new OAuth authorization grant

2022-12-23 Thread Malla Simhachalam
Hello All, Hope you are all doing great. We have been thinking of creating a proposal for a new OAuth2 authorization grant based on the FIDO credentials, please let us know your thoughts so that we can put together a draft proposal. /** Abstract: FIDO Profile for OAuth2.0 Authorization