[WG-UMA] Extend Register Permission to include requested URL and HTTP Method

Michael Schwartz mike at gluu.org
Tue Aug 26 13:39:51 CDT 2014


> I think this chattiness here, however, is necessary.

As the decision to request a new authorization for every request is 
under the control of the RS, I think optional support for sending the 
requested URL for use in AS policy evaluation does not really hurt 
anyone is afraid of the significant performance hit.

For example, if a proper Internet authorization decision that takes a 
few seconds saves you from a two hour drive, it could be worth it!

- Mike Schwartz
Gluu



More information about the WG-UMA mailing list