Skip to content

Match acl:origin with OIDC azp  #64

Closed
Closed
Match acl:origin with OIDC azp #64
Milestone
security

Description

@michielbdejong
michielbdejong
opened on Jan 14, 2025

Reviving solid/webid-oidc-spec#34
Use PoP token issuer for app origin to determine the meaning of acl:origin triples in WAC.
The client can prove its origin by showing that it is explicitly list as in the audience array of the OIDC token.

Activity

  1. michielbdejong
    added this to the security milestone on Jan 14, 2025

  2. michielbdejong commented on Jan 14, 2025

    @michielbdejong
    michielbdejong
    on Jan 14, 2025
    CollaboratorAuthor

    See also solid/webid-oidc-spec#12

  3. michielbdejong commented on Jan 15, 2025

    @michielbdejong
    michielbdejong
    on Jan 15, 2025
    CollaboratorAuthor

    Actually thanks to @jaxoncreed for pointing me to https://solidproject.org/TR/oidc#tokens-id which mentions azp

  4. michielbdejong commented on Jan 16, 2025

    @michielbdejong
    michielbdejong
    on Jan 16, 2025
    CollaboratorAuthor

    Closing this in the light of solid/web-access-control-spec#34 (comment)

  5. michielbdejong
    closed this as completedon Jan 16, 2025
  6. michielbdejong
    changed the title [-]Match `acl:origin` with OIDC `aud` [/-] [+]Match `acl:origin` with OIDC `azp` [/+] on Jan 16, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions