| rfc9396v2.txt | rfc9396.txt | |||
|---|---|---|---|---|
| skipping to change at line 679 ¶ | skipping to change at line 679 ¶ | |||
| element of access. To make a comparison in this instance, the AS | element of access. To make a comparison in this instance, the AS | |||
| would perform the following steps: | would perform the following steps: | |||
| * verify that the authorization code issued in the previous step | * verify that the authorization code issued in the previous step | |||
| contains an authorization details object of type | contains an authorization details object of type | |||
| account_information, | account_information, | |||
| * verify whether the approved list of actions contains | * verify whether the approved list of actions contains | |||
| list_accounts, and | list_accounts, and | |||
| * verify whether the locations value includes only previously- | * verify whether the locations value includes only previously | |||
| approved locations. | approved locations. | |||
| If all checks succeed, the AS would issue the requested access token | If all checks succeed, the AS would issue the requested access token | |||
| with the reduced set of access. | with the reduced set of access. | |||
| Note that this comparison is relevant to this specific API type | Note that this comparison is relevant to this specific API type | |||
| definition. A different API type definition could have different | definition. A different API type definition could have different | |||
| processing rules. For example, the value of an actions could subsume | processing rules. For example, an actions value could subsume the | |||
| the rights associated with another actions value. For example, if a | rights associated with another actions value. For example, if a | |||
| client initially asks for a token with write access, this implies | client initially asks for a token with write access, this implies | |||
| both read and write access to this API: | both read and write access to this API: | |||
| [ | [ | |||
| { | { | |||
| "type": "example_api", | "type": "example_api", | |||
| "actions": [ | "actions": [ | |||
| "write" | "write" | |||
| ] | ] | |||
| } | } | |||
| End of changes. 2 change blocks. | ||||
| 3 lines changed or deleted | 3 lines changed or added | |||
This html diff was produced by rfcdiff 1.48. | ||||