[WG-UMA] Extend Register Permission to include requested URL and HTTP Method

Michael Schwartz mike at gluu.org
Thu Aug 21 10:57:05 CDT 2014


Uma-gurus,

We are working on an enhancement to OX that may be of interest to UMA in 
general:
   http://ox.gluu.org/doku.php?id=uma:uma_request_info

The Idea is to provide information about request info from client to the 
RS, so it's possible to map policies decision based on that information. 
For example, consider a DELETE request to:
     http://example.com/api/v1/addThing/1234
The AS may want to make an access decision based on the item. For 
example, a policy may specify that only the owner of the item can delete 
it.

thx,

Mike


-------------------------------------
Michael Schwartz
Gluu
Founder / CEO



More information about the WG-UMA mailing list