Capabilities and User Managed Access (UMA)
"Karp, Alan H" <[email protected]> Fri, 6 Mar 2015 15:58:52 +0000
| Newsgroups | gmane.comp.capabilities.general |
|---|---|
| Message-ID | <8AD823089998C849A832D86972E69CD54FE4AD6A@G4W3222.americas.hpqcorp.net> |
Eve Maler's talk on UMA is available at http://kit.mit.edu/seminars/2015-webinars. I don't think the UMAnitarians (Yes, that's what they call themselves.) know that they are using OAuth bearer tokens as capabilities, but they are. That disconnect leads to some oddities, but I believe they are tolerable. The part that interests me is the way UMA uses OAuth to enforce user-defined access policies. ________________________ Alan Karp Principal Scientist Enterprise Services, Office of the CTO Hewlett-Packard Company 1501 Page Mill Road Palo Alto, CA 94304 (650) 857-3967, fax (650) 857-7029 http://www.hpl.hp.com/personal/Alan_Karp