Skip to content

Commit fc120ee

Browse files
committed
Explicited invite flow steps with WAYF page and added capability
1 parent ae29958 commit fc120ee

File tree

1 file changed

+6
-5
lines changed

1 file changed

+6
-5
lines changed

IETF-RFC.md

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -129,7 +129,7 @@ OCM Servers MAY enforce a policy to only accept Shares between such trusted cont
129129

130130
* the Invite Sender OCM Server generates a unique Invite Token and helps the Invite Sender to create the Invite Message
131131
* the Invite Sender uses some out-of-band communication to send the Invite Message, containing the Invite Token and the Invite Sender OCM Server FQDN, to the Invite Receiver
132-
* the Invite Receiver navigates to the Invite Receiver OCM Server (possibly using a WAYF Page provided as part of the Invite Message) and makes the Invite Acceptance Gesture
132+
* the Invite Receiver navigates to the Invite Receiver OCM Server and makes the Invite Acceptance Gesture. This step MAY be facilitated if the Invite Sender OCM Server implements a WAYF Page, such that the Invite Message would include a link to it for the Invite Receiver to navigate to: the Invite Receiver would then be able to indicate their OCM Server and proceed with the Invite Acceptance Gesture without manually copying the Invite Token.
133133
* the Invite Receiver OCM Server discovers the OCM API of the Invite Sender OCM Server using generic OCM API Discovery (see section below)
134134
* the Invite Receiver OCM Server sends the Invite Acceptance Request to the Invite Sender OCM Server
135135

@@ -302,11 +302,12 @@ itself be an object containing the following fields:
302302
As implementations MUST accept Share Creation Notifications to be compliant,
303303
it is not necessary to expose that as a capability.
304304
Example: `["receive-code", "webdav-uri"]`. The array MAY include for instance:
305-
* `"enforce-mfa"` - to indicate that this OCM server can apply a Sending Server's MFA requirements for a Share on their behalf.
306-
* `"webdav-uri"` - to indicate that this OCM server can append a relative URI to the path listed for WebDAV in the appropriate `resourceTypes` entry
307-
* `"protocol-object"` - to indicate that this OCM server can receive a Share Creation Notification whose `protocol` object contains one property per supported protocol instead of containing the standard `name` and `options` properties.
305+
* `"enforce-mfa"` - to indicate that this OCM Server can apply a Sending Server's MFA requirements for a Share on their behalf.
306+
* `"webdav-uri"` - to indicate that this OCM Server can append a relative URI to the path listed for WebDAV in the appropriate `resourceTypes` entry
307+
* `"protocol-object"` - to indicate that this OCM Server can receive a Share Creation Notification whose `protocol` object contains one property per supported protocol instead of containing the standard `name` and `options` properties.
308308
* `"invites"` - to indicate the server would support acting as an Invite Sender or Invite Receiver OCM Server. This might be useful for suggesting to a user that existing contacts might be upgraded to the more secure (and possibly required) invite flow.
309-
* `"receive-code"` - to indicate that this OCM server can receive a `code` as part of a Share Creation Notification, and exchange it for a bearer token at the Sending Server's `/token` API endpoint.
309+
* `"receive-code"` - to indicate that this OCM Server can receive a `code` as part of a Share Creation Notification, and exchange it for a bearer token at the Sending Server's `/token` API endpoint.
310+
* `"invite-wayf"` - to indicate that this OCM Server exposes a WAYF Page to facilitate the Invite flow.
310311
* OPTIONAL: criteria (array of string) - The criteria for accepting a Share Creation Notification.
311312
As all Receiving Servers should require the use of TLS in API calls,
312313
it is not necessary to expose that as a criterium.

0 commit comments

Comments
 (0)