跳到主要内容

3. IANA 考量

3.1. OAuth Token Introspection Response 注册表​

本规范建立 "OAuth Token Introspection Response" 注册表.

OAuth 注册客户端元数据名称和描述通过 Specification Required [RFC5226] 注册, 注册前需在 [email protected] 邮件列表上经过两周审查期, 并依据一个或多个 Designated Experts 的建议. 但是, 为允许在发布前分配名称, Designated Expert(s) 在确信相关规范将会发布后, 可以批准注册.

发送到邮件列表进行审查的注册请求应使用适当主题 (例如 "Request to register OAuth Token Introspection Response name: example").

在审查期内, Designated Expert(s) 将批准或拒绝注册请求, 并将决定告知审查列表和 IANA. 拒绝应包含解释, 并在适用时给出如何使请求成功的建议.

IANA 必须只接受来自 Designated Expert(s) 的注册表更新, 并应将所有注册请求引导至审查邮件列表.

3.1.1. 注册模板​

Name: 请求的名称 (例如 "example"). 该名称区分大小写. 不应接受以大小写不敏感方式匹配其他已注册名称的名称. 与 [RFC7519] 建立的 "JSON Web Token Claims" 注册表中已注册 claim 匹配的名称, 应具有可比的定义和语义.

Description: 元数据值的简要描述 (例如 "Example description").

Change controller: 对于 Standards Track RFC, 填写 "IESG". 对于其他文档, 给出负责方名称. 也可以包含其他详细信息 (例如邮政地址, 电子邮件地址, 主页 URI).

Specification document(s): 引用规定 token endpoint 授权方法的文档, 最好包含可用于获取该文档副本的 URI. 也可以包含相关章节说明, 但不是必需的.

3.1.2. 初始注册表内容​

"OAuth Token Introspection Response" 注册表的初始内容如下:

  • Name: "active"
  • Description: Token active status
  • Change Controller: IESG
  • Specification Document(s): Section 2.2 of RFC 7662 (this document).
  • Name: "username"
  • Description: User identifier of the resource owner
  • Change Controller: IESG
  • Specification Document(s): Section 2.2 of RFC 7662 (this document).
  • Name: "client_id"
  • Description: Client identifier of the client
  • Change Controller: IESG
  • Specification Document(s): Section 2.2 of RFC 7662 (this document).
  • Name: "scope"
  • Description: Authorized scopes of the token
  • Change Controller: IESG
  • Specification Document(s): Section 2.2 of RFC 7662 (this document).
  • Name: "token_type"
  • Description: Type of the token
  • Change Controller: IESG
  • Specification Document(s): Section 2.2 of RFC 7662 (this document).
  • Name: "exp"
  • Description: Expiration timestamp of the token
  • Change Controller: IESG
  • Specification Document(s): Section 2.2 of RFC 7662 (this document).
  • Name: "iat"
  • Description: Issuance timestamp of the token
  • Change Controller: IESG
  • Specification Document(s): Section 2.2 of RFC 7662 (this document).
  • Name: "nbf"
  • Description: Timestamp before which the token is not valid
  • Change Controller: IESG
  • Specification Document(s): Section 2.2 of RFC 7662 (this document).
  • Name: "sub"
  • Description: Subject of the token
  • Change Controller: IESG
  • Specification Document(s): Section 2.2 of RFC 7662 (this document).
  • Name: "aud"
  • Description: Audience of the token
  • Change Controller: IESG
  • Specification Document(s): Section 2.2 of RFC 7662 (this document).
  • Name: "iss"
  • Description: Issuer of the token
  • Change Controller: IESG
  • Specification Document(s): Section 2.2 of RFC 7662 (this document).
  • Name: "jti"
  • Description: Unique identifier of the token
  • Change Controller: IESG
  • Specification Document(s): Section 2.2 of RFC 7662 (this document).
最后于 更新