Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OAUTH2.0 authorization code grant in API description #61

Closed
DT-DawidWroblewski opened this issue Sep 21, 2023 · 1 comment
Closed

OAUTH2.0 authorization code grant in API description #61

DT-DawidWroblewski opened this issue Sep 21, 2023 · 1 comment

Comments

@DT-DawidWroblewski
Copy link
Collaborator

Problem description
According to issue #53 from commonalities we should use the OIDC security scheme for NumberVerification API.

There is an inconsistency inside yaml between the description & UML that points to OAUTH2.0 authorization code grant flow.

It is either OAUTH2.0 or OpenID Connect (with ID Token delivered in token response).

Expected behavior
Description that meets requirements from Commonalities - OpenID Connect flow described within UML & API description (yaml)

Alternative solution
If we think that we should use OAUTH2.0 Authorization code grant alternatively - we should apply changes in yaml and promote them inside commonalities.

Additional context

@DT-DawidWroblewski
Copy link
Collaborator Author

discussion continues here: Issue#90 Identity & Consent Management

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant