On Mon, Aug 21, 2017 at 1:54 PM, Farasath Ahamed <farasa...@wso2.com> wrote:
>
>
>
> On Mon, Aug 21, 2017 at 1:23 PM, Gayan Gunawardana <ga...@wso2.com> wrote:
>
>>
>>
>> On Mon, Aug 21, 2017 at 1:21 PM, Ruwan Abeykoon <ruw...@wso2.com> wrote:
>>
>>> Hi All,
>>> I think we need to add them in introspection result, since they were
>>> anyway present in AuthenticationResponse inside JWT.
>>>
>>> @Gayan,
>>> How about the acr, amr ?
>>>
>> +1 we can add them too.
>>
>
> Can we also consider providing an extension point to decide attributes
> that go into the introspection response?
>
+1 token binding will introduce some more attributes.
>
>
>>
>>> Cheers,
>>> Ruwan
>>>
>>> On Mon, Aug 21, 2017 at 11:08 AM, Gayan Gunawardana <ga...@wso2.com>
>>> wrote:
>>>
>>>> Hi Indunil,
>>>>
>>>> Form token introspection response I can get below attributes.
>>>>
>>>> {"scope":"openid","active":true,"token_type":"Bearer","exp":
>>>> 1503061170,"iat":1503057570,"client_id":"oRbEK6KkycbSLGxt3JH
>>>> ciaitPzoa","username":"admin@carbon.super"}
>>>>
>>>> But some of optional attributes are not included in introspection
>>>> response
>>>>
>>>> sub
>>>> OPTIONAL. Subject of the token, as defined in JWT [RFC7519
>>>> <https://tools.ietf.org/html/rfc7519>].
>>>> Usually a machine-readable identifier of the resource owner who
>>>> authorized this token.
>>>>
>>>> aud
>>>> OPTIONAL. Service-specific string identifier or list of string
>>>> identifiers representing the intended audience for this token, as
>>>> defined in JWT [RFC7519 <https://tools.ietf.org/html/rfc7519>].
>>>>
>>>> iss
>>>> OPTIONAL. String representing the issuer of this token, as
>>>> defined in JWT [RFC7519 <https://tools.ietf.org/html/rfc7519>].
>>>>
>>>> Do we have any limitation to support above attributes ?
>>>>
>>>>
>>>> [1] https://tools.ietf.org/html/rfc7662
>>>>
>>>> Thanks,
>>>> Gayan
>>>> --
>>>> Gayan Gunawardana
>>>> Senior Software Engineer; WSO2 Inc.; http://wso2.com/
>>>> Email: ga...@wso2.com
>>>> Mobile: +94 (71) 8020933
>>>>
>>>
>>>
>>>
>>>
>>>
>>
>>
>> --
>> Gayan Gunawardana
>> Senior Software Engineer; WSO2 Inc.; http://wso2.com/
>> Email: ga...@wso2.com
>> Mobile: +94 (71) 8020933
>>
>> _______________________________________________
>> Dev mailing list
>> Dev@wso2.org
>> http://wso2.org/cgi-bin/mailman/listinfo/dev
>>
>>
>
--
Gayan Gunawardana
Senior Software Engineer; WSO2 Inc.; http://wso2.com/
Email: ga...@wso2.com
Mobile: +94 (71) 8020933
_______________________________________________
Dev mailing list
Dev@wso2.org
http://wso2.org/cgi-bin/mailman/listinfo/dev
