Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add discussion of authorization use cases #362

Merged
merged 6 commits into from
Feb 19, 2024
Merged

Add discussion of authorization use cases #362

Changes from 1 commit
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
4a465a7
Add discussion of authorization use cases
wes-smith Jan 30, 2024
07faf3d
Apply editorial suggestions to added text.
wes-smith Feb 13, 2024
cb587db
Apply editorial changes to added text.
wes-smith Feb 13, 2024
ef0bc19
Add examples of "Permissioned" interactions.
wes-smith Feb 13, 2024
5f01371
Fix grammar in authorization explanation.
msporny Feb 19, 2024
67bc74b
Remove confusing normative language, generalize retail example.
msporny Feb 19, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion index.html
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -585,7 +585,8 @@ <h3>Authorization</h3>
</li>
<li>
wes-smith marked this conversation as resolved.
Show resolved Hide resolved
<i>Permissioned</i>. Permissioned authorization requires the entity making
the API call to have an access control token issued from a mutually trusted
the API call to, for example, have an access control token, or capability
URL, or invoke a capability from a mutually trusted
msporny marked this conversation as resolved.
Show resolved Hide resolved
source. These permissions grant access to the API, but make no assumptions
about credential subjects, previous interactions, or the like. Permissioned
access is particularly useful in service-to-service based workflows, where
Expand Down