Skip to content

Commit 70aed36

Browse files
authored
Merge pull request #324 from openid/mbj-clarifications-from-1.1
Clarifications identified while splitting the 1.1 specs
2 parents 4771e5b + 7198c51 commit 70aed36

File tree

1 file changed

+21
-16
lines changed

1 file changed

+21
-16
lines changed

openid-federation-1_0.xml

Lines changed: 21 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -2195,7 +2195,7 @@
21952195
</t>
21962196
<t>
21972197
A Trust Chain with Entity metadata that does not comply with
2198-
the resolved metadata policies is deemed invalid.
2198+
the Resolved Metadata policies is deemed invalid.
21992199
</t>
22002200
</list>
22012201
</t>
@@ -3161,7 +3161,7 @@
31613161
contains a <spanx style="verb">metadata</spanx> Claim, this MUST
31623162
first be applied, as described in the Claim definition in
31633163
<xref target="common-claims"/>, and only then it can be
3164-
proceeded with applying the resolved metadata policy.
3164+
proceeded with applying the Resolved Metadata policy.
31653165
</t>
31663166

31673167
<t>
@@ -3382,10 +3382,10 @@
33823382
Intermediate Entity for its Immediate Subordinates are applied to
33833383
the Trust Chain subject <spanx style="verb">metadata</spanx>.
33843384
After that, the merged metadata policy is applied, to produce the
3385-
following resulting resolved RP metadata:
3385+
following resulting RP Resolved Metadata:
33863386
</preamble>
33873387
<name>
3388-
The Resulting Resolved RP Metadata for the Trust Chain Subject
3388+
The Resulting RP Resolved Metadata for the Trust Chain Subject
33893389
</name>
33903390
<artwork><![CDATA[
33913391
{
@@ -4743,7 +4743,7 @@ Host: openid.sunet.se
47434743
</t>
47444744
<t hangText="metadata">
47454745
<vspace/>
4746-
REQUIRED. JSON object containing the resolved subject metadata,
4746+
REQUIRED. JSON object containing the subject's Resolved Metadata,
47474747
according to the requested <spanx style="verb">type</spanx>
47484748
and expressed in the <spanx style="verb">metadata</spanx> format
47494749
defined in <xref target="common-claims"/>.
@@ -7008,7 +7008,7 @@ HTTP/1.1 302 Found
70087008
<vspace blankLine="1"/>
70097009

70107010
The RP SHOULD select its metadata parameters to comply with
7011-
the resolved OP metadata and thus ensure a successful
7011+
the OP's Resolved Metadata and thus ensure a successful
70127012
registration with the OP. Note that if the submitted RP
70137013
metadata is not compliant with the metadata of the OP, the
70147014
OP may choose to modify it to make it compliant
@@ -7447,7 +7447,7 @@ HTTP/1.1 302 Found
74477447
</t>
74487448
<t>
74497449
The RP MUST first ensure that the information it was registered with
7450-
at the OP contains the same set of entity_types as the request does.
7450+
at the OP contains the same set of Entity Types as the request does.
74517451
After having collected a Trust Chain using the response Claim
74527452
<spanx style="verb">trust_anchor</spanx> as the
74537453
Entity Identifier for the Trust Anchor and
@@ -8053,7 +8053,7 @@ HTTP/1.1 302 Found
80538053
<t>Use Fetch Endpoints (as defined in <xref target="fetch_statement"/>) to obtain Subordinate Statements about the subject entity.</t>
80548054
<t>Recursively traverse up the hierarchy until reaching a Trust Anchor.</t>
80558055
<t>Build and validate the complete Trust Chain.</t>
8056-
<t>Apply federation policies to derive resolved metadata.</t>
8056+
<t>Apply federation policies to derive Resolved Metadata.</t>
80578057
</list>
80588058
</t>
80598059
</section>
@@ -8109,7 +8109,7 @@ HTTP/1.1 302 Found
81098109
<list style="symbols">
81108110
<t>Entities that want to offload Trust Chain resolution complexity,</t>
81118111
<t>Centralized trust evaluation services,</t>
8112-
<t>Performance optimization by caching resolved metadata, and</t>
8112+
<t>Performance optimization by caching Resolved Metadata, and</t>
81138113
<t>Simplified integration for lightweight clients.</t>
81148114
</list>
81158115
</t>
@@ -8125,9 +8125,9 @@ HTTP/1.1 302 Found
81258125
<t>Identify a trusted resolver with a Resolve Endpoint.</t>
81268126
<t>Submit the subject Entity Identifier and Trust Anchor to the resolver.</t>
81278127
<t>The resolver performs complete Trust Chain resolution internally (following the bottom-up pattern).</t>
8128-
<t>The resolver returns resolved metadata and Trust Marks.</t>
8128+
<t>The resolver returns Resolved Metadata and Trust Marks.</t>
81298129
<t>Optionally verify the resolver's own Trust Chain.</t>
8130-
<t>Use resolved metadata for protocol operations.</t>
8130+
<t>Use Resolved Metadata for protocol operations.</t>
81318131
</list>
81328132
</t>
81338133
</section>
@@ -8228,7 +8228,7 @@ HTTP/1.1 302 Found
82288228
</t>
82298229
<t>
82308230
Entities may be required to include a
8231-
<xref target="trust_chain_head_param">Trust Chain</xref>
8231+
Trust Chain
82328232
in their requests, as explained in <xref target="UsingAuthzRequestObject"/>.
82338233
The static Trust Chain gives a predefined trust path,
82348234
meaning that Federation Entity Discovery need not be performed.
@@ -10292,7 +10292,7 @@ HTTP/1.1 302 Found
1029210292

1029310293
</references>
1029410294

10295-
<section anchor="ChainBuildingExample" title="Example OpenID Provider Information Discovery and Client Registration">
10295+
<section anchor="FederationExamples" title="Examples Building and Using Trust Chains">
1029610296
<t>
1029710297
Let us assume the following: The project LIGO would like to offer access
1029810298
to its wiki to all OPs in eduGAIN. LIGO is registered with the InCommon
@@ -10983,7 +10983,7 @@ Host: geant.org
1098310983
</t>
1098410984
</section>
1098510985

10986-
<section anchor="metadata-for-op" title="Verified Metadata for https://op.umu.se">
10986+
<section anchor="metadata-for-op" title="OP Resolved Metadata for https://op.umu.se">
1098710987
<t>Having verified the chain, the LIGO Wiki RP can proceed with the
1098810988
next step.
1098910989
</t>
@@ -10993,10 +10993,12 @@ Host: geant.org
1099310993
have by
1099410994
Immediate Superiors about their Immediate Subordinates and applying the combined policy
1099510995
to the
10996-
metadata statement that the Leaf Entity presented, we get:
10996+
metadata statement that the Leaf Entity presented, we get
10997+
the following Resolved Metadata for the
10998+
<spanx style="verb">openid_provider</spanx> Entity Type:
1099710999
</preamble>
1099811000
<name>
10999-
Resolved Metadata Derived from Trust Chain by Applying Metadata Policies
11001+
OP Resolved Metadata Derived from Trust Chain by Applying Metadata Policies
1100011002
</name>
1100111003
<artwork><![CDATA[
1100211004
{
@@ -11529,6 +11531,9 @@ Host: op.umu.se
1152911531
<t>
1153011532
Fixed #317: Corrected Trust Chain example.
1153111533
</t>
11534+
<t>
11535+
Applied clarifications identified while splitting the 1.1 specs.
11536+
</t>
1153211537
</list>
1153311538
</t>
1153411539

0 commit comments

Comments
 (0)