<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div>
<div>
<div>Yes, we may be interested but will need to clear some internal hurdles first. Will keep you posted.</div>
<div><br>
</div>
<div>Regards,</div>
<div>Luiz</div>
<div>
<div id="MAC_OUTLOOK_SIGNATURE"></div>
</div>
</div>
</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:12pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Justin Richer<br>
<span style="font-weight:bold">Date: </span>Friday, October 23, 2015 at 2:21 PM<br>
<span style="font-weight:bold">To: </span>Luiz Omori, "<a href="mailto:mitreid-connect@mit.edu">mitreid-connect@mit.edu</a>"<br>
<span style="font-weight:bold">Subject: </span>Re: [mitreid-connect] Custom claims<br>
</div>
<div><br>
</div>
<div>
<div>
<div>Thanks, I did see the note. The draft in question is now an RFC but we don't have any concrete plans for implementation right now. We'd be happy to take a pull request, especially something that makes the assertion processing pluggable since that will
be different for every domain.</div>
<div><br>
</div>
<div>Is this something your group is interested in implementing? </div>
<div><br>
</div>
<div id="composer_signature"><div< div="">
<div>
<div>-- Justin</div>
<div><br>
</div>
<div>/ Sent from my phone /</div>
</div>
<div></div>
</div<></div>
<br>
<br>
-------- Original message --------<br>
From: Luiz Omori <<a href="mailto:luiz.omori@duke.edu">luiz.omori@duke.edu</a>> <br>
Date: 10/23/2015 1:42 PM (GMT-05:00) <br>
To: Justin Richer <<a href="mailto:jricher@mit.edu">jricher@mit.edu</a>>, <a href="mailto:mitreid-connect@mit.edu">
mitreid-connect@mit.edu</a> <br>
Subject: Re: [mitreid-connect] Custom claims <br>
<br>
<div>
<div>Thanks. Talking about standard ways, what if JWT Bearer flow is used and the incoming JWT contains custom claims, would those be added to the MitreId access_token claims (once this flow is implemented, that is) and returned by the Introspection endpoint?
The draft that I found (<a href="https://tools.ietf.org/html/draft-jones-oauth-jwt-bearer-04">https://tools.ietf.org/html/draft-jones-oauth-jwt-bearer-04</a>) mentions custom claims but it wasn’t clear to me if they have to be copied to the access_token (assuming
JWT like in MitreId case) or returned by Introspection. </div>
<div><br>
</div>
<div>By the way, I’ve added a comment to the Git request to have the JWT Bearer implemented. I believe it would be very beneficial to us too, independently of the comments above. Is it still in draft state?</div>
<div><br>
</div>
<div>Regards,</div>
<div>Luiz</div>
<div>
<div id=""></div>
</div>
</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:12pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Justin Richer<br>
<span style="font-weight:bold">Date: </span>Friday, October 23, 2015 at 10:16 AM<br>
<span style="font-weight:bold">To: </span>Luiz Omori, "<a href="mailto:mitreid-connect@mit.edu">mitreid-connect@mit.edu</a>"<br>
<span style="font-weight:bold">Subject: </span>RE: [mitreid-connect] Custom claims<br>
</div>
<div><br>
</div>
<div>
<div>
<div>Oh, and there is no standard for extra parameters like that, introspection provides a place to put them though. </div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div id="composer_signature"><div< div="">
<div>
<div>-- Justin</div>
<div><br>
</div>
<div>/ Sent from my phone /</div>
</div>
<div></div>
</div<></div>
<br>
<br>
-------- Original message --------<br>
From: Luiz Omori <<a href="mailto:luiz.omori@duke.edu">luiz.omori@duke.edu</a>> <br>
Date: 10/23/2015 10:05 AM (GMT-05:00) <br>
To: <a href="mailto:mitreid-connect@mit.edu">mitreid-connect@mit.edu</a> <br>
Subject: [mitreid-connect] Custom claims <br>
<br>
<div style="color: rgb(0, 0, 0);">Hi,</div>
<div style="color: rgb(0, 0, 0);"><br>
</div>
<div style="color: rgb(0, 0, 0);">Is there a way to add a parameter to the Authorization Code Flow request and have it returned back via introspection? Even better if a standard way of doing that, i.e. defined in the OAuth standard. It would be great if state
was returned but I’m not getting that.</div>
<div style="color: rgb(0, 0, 0);"><br>
</div>
<div style="color: rgb(0, 0, 0);">Request:</div>
<div>
<div><a href="http://localhost:8080/ldap-openid-connect-server/authorize?response_type=code&client_id=growth_chart&scope=openid&redirect_uri=http://localhost:4000/index.html&state=07465f66-e4fd-4466-bcc4-5826ee7080a6">http://localhost:8080/ldap-openid-connect-server/authorize?response_type=code&client_id=growth_chart&scope=openid&redirect_uri=http://localhost:4000/index.html&state=07465f66-e4fd-4466-bcc4-5826ee7080a6</a><font color="#ff0000"><b>&client_data=blabla</b></font>&nonce=bd55e445-8d7f-4491-b48e-3458efcb829c</div>
</div>
<div>
<h1 style="color: rgb(0, 0, 0); font-family: ''; line-height: normal;">Introspection Info</h1>
<span style="color: rgb(0, 0, 0); font-size: medium; line-height: normal;">{ </span><br style="font-family: ''; font-size: medium; line-height: normal;">
<span style="color: rgb(0, 0, 0); font-size: medium; line-height: normal;"> "active": true, </span><br style="font-family: ''; font-size: medium; line-height: normal;">
<span style="color: rgb(0, 0, 0); font-size: medium; line-height: normal;"> "scope": "openid", </span><br style="font-family: ''; font-size: medium; line-height: normal;">
<span style="color: rgb(0, 0, 0); font-size: medium; line-height: normal;"> "expires_at": "2015-10-23T09:55:50-0400", </span><br style="font-family: ''; font-size: medium; line-height: normal;">
<span style="color: rgb(0, 0, 0); font-size: medium; line-height: normal;"> "exp": 1445608550, </span><br style="font-family: ''; font-size: medium; line-height: normal;">
<span style="color: rgb(0, 0, 0); font-size: medium; line-height: normal;"> "sub": "lro4", </span><br style="font-family: ''; font-size: medium; line-height: normal;">
<span style="color: rgb(0, 0, 0); font-size: medium; line-height: normal;"> "user_id": "lro4", </span><br style="font-family: ''; font-size: medium; line-height: normal;">
<span style="color: rgb(0, 0, 0); font-size: medium; line-height: normal;"> "client_id": "growth_chart", </span><br style="font-family: ''; font-size: medium; line-height: normal;">
<span style="color: rgb(0, 0, 0); font-size: medium; line-height: normal;"> "token_type": "Bearer", </span><br style="font-family: ''; font-size: medium; line-height: normal;">
<span style="font-size: medium; line-height: normal;"> <font color="#ff0000"><b>"client_data": "blabla"</b></font> </span><br style="font-family: ''; font-size: medium; line-height: normal;">
<span style="color: rgb(0, 0, 0); font-size: medium; line-height: normal;">}</span></div>
<div style="color: rgb(0, 0, 0);"><br>
</div>
<div style="color: rgb(0, 0, 0);">Regards,</div>
<div style="color: rgb(0, 0, 0);">Luiz</div>
<div style="color: rgb(0, 0, 0);">
<div id=""></div>
</div>
</div>
</div>
</span></div>
</div>
</span>
</body>
</html>