I-D Action: draft-sharma-oauth-identity-propagation-context-01.txt

Internet-Draft draft-sharma-oauth-identity-propagation-context-01.txt is now
available.

   Title:   Identity Propagation Context for Multi-Hop Delegation in OAuth 2.0 Environments
   Author:  Ravi Kant Sharma
   Name:    draft-sharma-oauth-identity-propagation-context-01.txt
   Pages:   70
   Dates:   2026-07-23

Abstract:

   This specification defines the Identity Propagation Context (IPC), a
   signed, short-lived context artifact that carries identity and
   delegation chain information across multi-hop service chains with
   per-hop cryptographic re-signing.  IPC complements the delegation
   semantics of OAuth 2.0 Token Exchange (RFC 8693) by enabling each
   trust boundary to independently verify the upstream signature and re-
   sign the identity context it forwards, supporting cascade revocation,
   delegation depth limits, and cross-protocol propagation (HTTP, gRPC,
   and event-streaming systems).

   Unlike the act claim in RFC 8693, which is explicitly designated as
   "informational only and not to be considered in access control
   decisions," IPC is designed for identity propagation that can be used
   in access control decisions, with per-hop cryptographic re-signing
   within a single trust domain.  In autonomous agent architectures and
   multi-service platforms, Each trust boundary verifies the upstream
   signature and re-signs with its own key before forwarding; the
   delegation chain content is asserted by the IPC Creator and trusted
   transitively through the chain of re-signing intermediaries.  This
   provides single-hop-verifiable integrity (each service can verify its
   immediate upstream) rather than end-to-end cryptographic proof of the
   full chain.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-sharma-oauth-identity-propagation-context/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-sharma-oauth-identity-propagation-context-01.html

A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-sharma-oauth-identity-propagation-context-01

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts


_______________________________________________
I-D-Announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]