Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: add access-identity to auth-server.yaml #497

Draft
wants to merge 1 commit into
base: main
Choose a base branch
from
Draft

feat: add access-identity to auth-server.yaml #497

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 22 additions & 0 deletions openapi/auth-server.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -313,6 +313,7 @@ components:
- $ref: '#/components/schemas/access-incoming'
- $ref: '#/components/schemas/access-outgoing'
- $ref: '#/components/schemas/access-quote'
- $ref: '#/components/schemas/access-identity'
description: The access associated with the access token is described using objects that each contain multiple dimensions of access.
unevaluatedProperties: false
access-incoming:
Expand Down Expand Up @@ -375,6 +376,27 @@ components:
- type
- actions
- identifier
access-identity:
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Based on the discussion from the Open Payments Community call, this would also require an additional property that will need to be provided - the user wallet address. This way, the wallet provider can validate if the connected user (on their side) is the owner of the wallet address when the user is redirected to the IdP page.

title: access-identity
type: object
properties:
type:
type: string
enum:
- user-identity
description: The type of resource request as a string. This field defines which other fields are allowed in the request object.
actions:
type: array
description: The types of actions the client instance will take at the RS as an array of strings.
items:
type: string
enum:
- read
uniqueItems: true
required:
- type
- actions
- identifier
access-quote:
title: access-quote
type: object
Expand Down