Ooooh! ID-JAG or OAuth Identity Assertion JWT Authorization Grants looks interesting: https://www.ietf.org/archive/id/draft-ietf-oauth-identity-assertion-authz-grant-01.html
Discussion
Loading...
@thisismissem I鈥檝e never seen someone Oooh over oauth. 馃槄 I鈥檓 happy to see it tho.
@thisismissem This sequence diagram is _exactly_ the "some kind of token exchange" idea I was banging on about on Discord a few weeks ago.
Very interesting indeed to see that there's a proper spec for it. Now I'll have to look at it & work out how similar it is to my WIP implementation.
@thisismissem Ahh, the fundamental theorem of software engineering: "Any problem in computer science can be solved with another layer of indirection, except of course for the problem of too many indirections." -- David J. Wheeler
@henryk it's interesting for certain use cases and workloads.