GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE

  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Embed Notice

HTML Code

Corresponding Notice

  1. Embed this notice
    silverpill (silverpill@mitra.social)'s status on Tuesday, 13-Aug-2024 15:54:53 JSTsilverpillsilverpill
    in reply to
    • FenTiger

    @fentiger

    >What if the user has a FEP-ef61 nomadic actor?
    >perhaps the IdP could expose an access-controlled endpoint to generate a signature on the user's behalf

    This should be possible with did:web authority (existing implementations use did:key). I haven't yet researched what our options are, but here are my bookmarks related to this problem:

    - https://openid.net/specs/openid-connect-self-issued-v2-1_0.html
    - https://w3c-ccg.github.io/vp-request-spec/#did-authentication
    - https://git.juici.ly/consensual/federated-auth-network/src/branch/master/SPEC.md

    Alternatively, FEP-ae97 provides a different path to nomadic SSO where identity key is stored on a client side, so users can simply copy their key when switching clients. As long as activity integrity proof is valid, it would be accepted by servers.

    In conversationabout 10 months ago from mitra.socialpermalink

    Attachments

    1. No result found on File_thumbnail lookup.
      Self-Issued OpenID Provider v2 - draft 13
      from Torsten Lodderstedt
      OpenID Connect defines mechanisms by which an End-User can leverage an OpenID Provider (OP) to release identity information (such as authentication and claims) to a Relying Party (RP) which can act on that information. In this model, the RP trusts assertions made by the OP, i.e. the OP is the issuer of these assertions. This specification extends OpenID Connect with the concept of a Self-Issued OpenID Provider (Self-Issued OP), an OP controlled by the End-User. The Self-Issued OP does not itself assert identity information about this End-User. Instead the End-User becomes the issuer of identity information. Using Self-Issued OPs, End-Users can authenticate themselves with Self-Issued ID Tokens signed with keys under the End-User's control and present self-attested claims directly to the RPs. Self-Issued OPs can also present cryptographically verifiable claims issued by the third parties trusted by the RPs, when used with separate specifications such as , or Aggregated and Distributed Claims defined in Section 5.6.2 of . This allows End-Users to interact with RPs, without RPs interacting directly with claims issuers.
    2. No result found on File_thumbnail lookup.
      Verifiable Presentation Request v0.2

    3. Invalid filename.
  • Help
  • About
  • FAQ
  • TOS
  • Privacy
  • Source
  • Version
  • Contact

GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.