IETF124 - OAuth WG Agenda

Monday (120 min)

• Chairs update – 15 min

• SD-JWT VC - Brian (20 min)

  https://datatracker.ietf.org/doc/draft-ietf-oauth-sd-jwt-vc/

• Identity Assertion Authorization Grant - Aaron/Brian (20 min)

  https://datatracker.ietf.org/doc/draft-ietf-oauth-identity-assertion-authz-grant/

• Updates to Audience Values for OAuth 2.0 Authorization Servers - Brian (10 min)

  https://datatracker.ietf.org/doc/draft-ietf-oauth-rfc7523bis/

• OAuth 2.1 - Aaron (15 min)

  https://datatracker.ietf.org/doc/draft-ietf-oauth-v2-1/

• Browser-swapping attacks - Jonas (20 min)

  https://openid.net/specs/fapi-security-profile-2_0-final.html#name-browser-swapping-attacks

• Application-Agnostic Demonstration Proof of Possession (DPoP) Framework - Suhas/Cullen (15 min)

  https://datatracker.ietf.org/doc/draft-nandakumar-oauth-dpop-proof/

• Delegated Authorization - Ruochen (5 min)

  https://datatracker.ietf.org/doc/draft-li-oauth-delegated-authorization/

Friday (120 min)

• Chairs update – 5 min

• Attestation-based Client Authentication - Paul (20 min)

  https://datatracker.ietf.org/doc/draft-ietf-oauth-attestation-based-client-auth/

• Client ID Metadata Document - Aaron (15 min)

  https://datatracker.ietf.org/doc/draft-ietf-oauth-client-id-metadata-document/

• DPoP for the Device Authorization Grant and JWT Authorization Grant - Aaron (15 min)

  https://datatracker.ietf.org/doc/draft-parecki-oauth-dpop-device-flow/
  https://datatracker.ietf.org/doc/draft-parecki-oauth-jwt-dpop-grant/

• Browserless app2app - Yaron Zehavi (15 min)

  https://datatracker.ietf.org/doc/draft-zehavi-oauth-app2app-browserless/

• Refresh Token and Consent Expiration - Nick Watson (15 min)

  https://datatracker.ietf.org/doc/draft-watson-oauth-refresh-token-expiration/

• Separating DPoP Bindings for Access and Refresh Tokens - Yaroslav (15 min)

  https://datatracker.ietf.org/doc/draft-rosomakho-oauth-dpop-rt/

• OAuth SPIFFE Client Authentication - Arndt (10 min)

  https://datatracker.ietf.org/doc/draft-schwenkschuster-oauth-spiffe-client-auth/

• Transaction Tokens - Atul (10 min)

  https://datatracker.ietf.org/doc/draft-ietf-oauth-transaction-tokens/