diff --git a/spec/VISSv2_Core.html b/spec/VISSv2_Core.html index 57db68e..79227a4 100644 --- a/spec/VISSv2_Core.html +++ b/spec/VISSv2_Core.html @@ -207,8 +207,10 @@

Definitions

Unique id value specified by the client. Returned by the server in the response and used by the client to link the request and response messages. The value MAY be an integer or a Universally Unique Identifier (UUID).
-
purpose
+
purpose
A purpose is one of the short text entries from the .
+
ECF
+
External Consent Framework. An agent that is responsible for inquiring a data owner about consent.
@@ -1061,10 +1063,10 @@

Access Grant Response

Access Token Request

The client may have to issue several requests before an access token can be obtained, even in the case of having a valid access grant token. - The reason for this is that if a consent is required, the ATS will forward the consent request to the External Consent Framework, - and it is likely that there will not be an immediate response from the ECF. + The reason for this is that if consent is required, the ATS will forward the consent request to the External Consent Framework, + and it is likely that there will not be an immediate response from the ECF. The ATS will then on the initial access token request respond to the client with a session handle that the client must use in subsequent requests for the access token. - When the ATS has obtained a consent reply from the ECF it can in the thereafter following client inquiry request in the case of a positive consent + When the ATS has obtained a consent reply from the ECF it can thereafter following client inquiry request in the case of a positive consent respond with the access token, or in the case of a negative consent respond with only the negative consent result.

@@ -1132,7 +1134,7 @@

Access Token Response To Initial Access Token Request

an immediate response is not possible, and the response to an initial access token request shall contain the parameter:

@@ -1141,12 +1143,12 @@

Access Token Response To Initial Access Token Request

Access Token Response To Inquiry Access Token Request

There are three different responses possible to an inquiry access token request.
- In the case that there is still no consent reply availablefrom the ECF, the response is identical to the response to the initial access token response, see above.
- In the case that there is a negative consent reply from the ECF, the response shall contain the parameter: + In the case that there is still no consent reply available from the ECF, the response is identical to the response to the initial access token response, see above.
+ In the case that there is a negative consent reply from the ECF, the response shall contain the parameter:

- In the case that there is a positive consent reply from the ECF, the response shall contain the parameters: + In the case that there is a positive consent reply from the ECF, the response shall contain the parameters: