Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Rel

Cardinality

HTTP Method(s)

Description

http://kantarainitiative.org/confluence/display/uma/req_user_uri

Required

As defined by OAuth

Supplies the OAuth user_uri endpoint requesters should use to gather the consent of the authorizing user for user delegation flows in synchronous person-to-service sharing scenarios.

http://kantarainitiative.org/confluence/display/uma/req_token_uri

Required

As defined by OAuth

Supplies the OAuth token_uri endpoint requesters should use to ask for an access token in Step 2.

...

Example XRD document

Code Block
xml
xml

<!-- Applies to both hosts and requesters -->
<Property 
    type="http://kantarainitiative.org/confluence/display/uma/token_formats">
       saml
</Property>
<Property 
    type="http://kantarainitiative.org/confluence/display/uma/claim_formats">
       json
</Property>

<!-- Host "authorization API" -->
<Link rel="http://kantarainitiative.org/confluence/display/uma/host_token_uri"
      href="https://am.example.com/host/token_uri"></Link>
<Link rel="http://kantarainitiative.org/confluence/display/uma/host_user_uri"
      href="https://am.example.com/host/user_uri"></Link>
<Link rel="http://kantarainitiative.org/confluence/display/uma/host_token_validation_uri"
      href="https://am.example.com/host/token_validation_uri"></Link>

<!-- Requester token-getting endpoints -->
<Link rel="http://kantarainitiative.org/confluence/display/uma/req_token_uri"
      href="https://am.example.com/requester/token_uri"></Link>
<Link rel="http://kantarainitiative.org/confluence/display/uma/req_user_uri"
      href="https://am.example.com/requester/user_uri"></Link>

Host obtains authorizing user's consent to trust AM for access decisions

...