rfc9396v2.txt   rfc9396.txt 
skipping to change at line 679 skipping to change at line 679
element of access. To make a comparison in this instance, the AS element of access. To make a comparison in this instance, the AS
would perform the following steps: would perform the following steps:
* verify that the authorization code issued in the previous step * verify that the authorization code issued in the previous step
contains an authorization details object of type contains an authorization details object of type
account_information, account_information,
* verify whether the approved list of actions contains * verify whether the approved list of actions contains
list_accounts, and list_accounts, and
* verify whether the locations value includes only previously- * verify whether the locations value includes only previously
approved locations. approved locations.
If all checks succeed, the AS would issue the requested access token If all checks succeed, the AS would issue the requested access token
with the reduced set of access. with the reduced set of access.
Note that this comparison is relevant to this specific API type Note that this comparison is relevant to this specific API type
definition. A different API type definition could have different definition. A different API type definition could have different
processing rules. For example, the value of an actions could subsume processing rules. For example, an actions value could subsume the
the rights associated with another actions value. For example, if a rights associated with another actions value. For example, if a
client initially asks for a token with write access, this implies client initially asks for a token with write access, this implies
both read and write access to this API: both read and write access to this API:
[ [
{ {
"type": "example_api", "type": "example_api",
"actions": [ "actions": [
"write" "write"
] ]
} }
 End of changes. 2 change blocks. 
3 lines changed or deleted 3 lines changed or added

This html diff was produced by rfcdiff 1.48.