Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Abstract 

This document is a non-normative set of auxiliary material produced by the User-Managed Access Work Group. It provides advice to, and discussions relevant to, developers and deployers of UMA-enabled software systems, services, and applications.

...

Proceed with the authorization results calculation based on CandidateGrantedScopes.

...

Anchor
pat-invalid
pat-invalid
Resource Server Error Handling When the PAT Is Invalid

If the RS can't get a permission ticket, it issues a 403 Forbidden HTTP error and Warning: 199 - "UMA Authorization Server Unreachable". One reason for being unable to get a permission ticket is that the resource owner's PAT has expired or is otherwise invalid, and it has no way of refreshing the PAT. In this case, the RS could take this opportunity to initiate some refreshing action such as send a notification to the resource owner and ask them to re-consent to the pairing with the AS as required.

...

Anchor
RO-RqP-org
RO-RqP-org
Considerations Regarding Resource Owners and Requesting Parties

...