Re: Add "oauth-authorization-resource" attribute?

Yes. I thought we agreed that this must be printer-uri/system-uri, since
this is the only thing that is verified by a certificate.

On Mon, Nov 7, 2022 at 9:13 AM Michael Sweet via ipp <[email protected]> wrote:

> Smith,
>
> I thought we had resolved this a couple IPP concalls ago - basically,
> "resource" for token exchange is explicitly the URI you are using to talk
> to the Printer (printer-uri) or System (system-uri) and not a
> self-advertised and unverifiable value (printer/system-uuid) provided by
> the Printer/System.
>
>
> > On Nov 7, 2022, at 11:17 AM, Kennedy, Smith (Wireless & IPP Standards)
> via ipp <[email protected]> wrote:
> >
> > Hi there,
> >
> > I had intended to mention earlier, but in the discussion of OAuth 2.0
> and IPP, it would be useful to Clients if the Printer indicated the
> "resource" parameter for the Token Exchange in step 34 of
> ipp-authentication-6-http-oauth2.pdf. Otherwise one deployment will want
> the value to be "printer-uuid" while another will want it to be
> "printer-uri" and universal clients will find it challenging to know what
> to use in what context.
> >
> > Thoughts?
> >
> > Smith
> >
> > /**
> >     Smith Kennedy
> >     HP Inc.
> > */
> >
> > _______________________________________________
> > ipp mailing list
> > [email protected]
> > https://www.pwg.org/mailman/listinfo/ipp
>
> ________________________
> Michael Sweet
>
> _______________________________________________
> ipp mailing list
> [email protected]
> https://www.pwg.org/mailman/listinfo/ipp
>

_______________________________________________
ipp mailing list
[email protected]
https://www.pwg.org/mailman/listinfo/ipp