[IPP] Add "oauth-authorization-resource" attribute?

[IPP] Add "oauth-authorization-resource" attribute?

Piotr Pawliczek pawliczek at google.com
Mon Nov 7 17:33:48 UTC 2022


Yes. I thought we agreed that this must be printer-uri/system-uri, since
this is the only thing that is verified by a certificate.

On Mon, Nov 7, 2022 at 9:13 AM Michael Sweet via ipp <ipp at pwg.org> wrote:

> Smith,
>
> I thought we had resolved this a couple IPP concalls ago - basically,
> "resource" for token exchange is explicitly the URI you are using to talk
> to the Printer (printer-uri) or System (system-uri) and not a
> self-advertised and unverifiable value (printer/system-uuid) provided by
> the Printer/System.
>
>
> > On Nov 7, 2022, at 11:17 AM, Kennedy, Smith (Wireless & IPP Standards)
> via ipp <ipp at pwg.org> wrote:
> >
> > Hi there,
> >
> > I had intended to mention earlier, but in the discussion of OAuth 2.0
> and IPP, it would be useful to Clients if the Printer indicated the
> "resource" parameter for the Token Exchange in step 34 of
> ipp-authentication-6-http-oauth2.pdf. Otherwise one deployment will want
> the value to be "printer-uuid" while another will want it to be
> "printer-uri" and universal clients will find it challenging to know what
> to use in what context.
> >
> > Thoughts?
> >
> > Smith
> >
> > /**
> >     Smith Kennedy
> >     HP Inc.
> > */
> >
> > _______________________________________________
> > ipp mailing list
> > ipp at pwg.org
> > https://www.pwg.org/mailman/listinfo/ipp
>
> ________________________
> Michael Sweet
>
> _______________________________________________
> ipp mailing list
> ipp at pwg.org
> https://www.pwg.org/mailman/listinfo/ipp
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.pwg.org/pipermail/ipp/attachments/20221107/1048d7b0/attachment.html>


More information about the ipp mailing list