attachment
<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">That sounds right - I couldn't remember how this played out and it doesn't seem to be covered in the wiki page.<div class=""><br class=""></div><div class="">However, I'm worried about that conclusion. If we advise that the Client supplies the "printer-uri" value as the resource identifier, wouldn't this mean that the Authentication Service needs to know the printer's current URI? That could be in the .local domain which isn't really any more useful or verifiable than a printer-uuid value. (Obviously how the printer and Authentication Service talk to one another is outside our scope of concern but that would affect whether the printer could register its URI with the Authentication Service.)</div><div class=""><br class=""></div><div class="">It seems like we could define the attribute but then provide guidance for how best to use it?<br class=""><div class=""><br class=""><div class="">
Smith<br class=""><br class=""><br class="">
</div>
<div><br class=""><blockquote type="cite" class=""><div class="">On Nov 7, 2022, at 10:13 AM, Michael Sweet <<a href="mailto:msweet@msweet.org" class="">msweet@msweet.org</a>> wrote:</div><br class="Apple-interchange-newline"><div class="">CAUTION: External Email<br class=""><br class=""><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(127, 127, 127, 1.0);" class=""><b class="">From: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class="">Michael Sweet <<a href="mailto:msweet@msweet.org" class="">msweet@msweet.org</a>><br class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(127, 127, 127, 1.0);" class=""><b class="">Subject: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class=""><b class="">Re: [IPP] Add "oauth-authorization-resource" attribute?</b><br class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(127, 127, 127, 1.0);" class=""><b class="">Date: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class="">November 7, 2022 at 10:13:17 AM MST<br class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(127, 127, 127, 1.0);" class=""><b class="">To: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class="">"Kennedy, Smith (Wireless & IPP Standards)" <<a href="mailto:smith.kennedy@hp.com" class="">smith.kennedy@hp.com</a>>, PWG IPP Workgroup <<a href="mailto:ipp@pwg.org" class="">ipp@pwg.org</a>><br class=""></span></div><br class=""><br class="">Smith,<br class=""><br class="">I thought we had resolved this a couple IPP concalls ago - basically, "resource" for token exchange is explicitly the URI you are using to talk to the Printer (printer-uri) or System (system-uri) and not a self-advertised and unverifiable value (printer/system-uuid) provided by the Printer/System.<br class=""><br class=""><br class=""><blockquote type="cite" class="">On Nov 7, 2022, at 11:17 AM, Kennedy, Smith (Wireless & IPP Standards) via ipp <<a href="mailto:ipp@pwg.org" class="">ipp@pwg.org</a>> wrote:<br class=""><br class="">Hi there,<br class=""><br class="">I had intended to mention earlier, but in the discussion of OAuth 2.0 and IPP, it would be useful to Clients if the Printer indicated the "resource" parameter for the Token Exchange in step 34 of ipp-authentication-6-http-oauth2.pdf. Otherwise one deployment will want the value to be "printer-uuid" while another will want it to be "printer-uri" and universal clients will find it challenging to know what to use in what context.<br class=""><br class="">Thoughts?<br class=""><br class="">Smith<br class=""><br class="">/**<br class=""> Smith Kennedy<br class=""> HP Inc.<br class="">*/<br class=""><br class="">_______________________________________________<br class="">ipp mailing list<br class=""><a href="mailto:ipp@pwg.org" class="">ipp@pwg.org</a><br class="">https://www.pwg.org/mailman/listinfo/ipp<br class=""></blockquote><br class="">________________________<br class="">Michael Sweet<br class=""><br class=""><br class=""><br class=""></div></blockquote></div><br class=""></div></div></body></html>