rfc9396v2.txt | rfc9396.txt | |||
---|---|---|---|---|
skipping to change at line 679 ¶ | skipping to change at line 679 ¶ | |||
element of access. To make a comparison in this instance, the AS | element of access. To make a comparison in this instance, the AS | |||
would perform the following steps: | would perform the following steps: | |||
* verify that the authorization code issued in the previous step | * verify that the authorization code issued in the previous step | |||
contains an authorization details object of type | contains an authorization details object of type | |||
account_information, | account_information, | |||
* verify whether the approved list of actions contains | * verify whether the approved list of actions contains | |||
list_accounts, and | list_accounts, and | |||
* verify whether the locations value includes only previously- | * verify whether the locations value includes only previously | |||
approved locations. | approved locations. | |||
If all checks succeed, the AS would issue the requested access token | If all checks succeed, the AS would issue the requested access token | |||
with the reduced set of access. | with the reduced set of access. | |||
Note that this comparison is relevant to this specific API type | Note that this comparison is relevant to this specific API type | |||
definition. A different API type definition could have different | definition. A different API type definition could have different | |||
processing rules. For example, the value of an actions could subsume | processing rules. For example, an actions value could subsume the | |||
the rights associated with another actions value. For example, if a | rights associated with another actions value. For example, if a | |||
client initially asks for a token with write access, this implies | client initially asks for a token with write access, this implies | |||
both read and write access to this API: | both read and write access to this API: | |||
[ | [ | |||
{ | { | |||
"type": "example_api", | "type": "example_api", | |||
"actions": [ | "actions": [ | |||
"write" | "write" | |||
] | ] | |||
} | } | |||
End of changes. 2 change blocks. | ||||
3 lines changed or deleted | 3 lines changed or added | |||
This html diff was produced by rfcdiff 1.48. |