Skip to content

LWS Access Request and Grant feature #105

@acoburn

Description

@acoburn

This issue can be used to track progress and discussion related to the access request and grant feature within LWS.

There is some prior art for this feature with Solid:

  • SAI Access Request and Access Grant - this feature is primarily a client-side data model and interaction pattern to be used with a trusted authorization agent
  • Inrupt Access Request and Access Grant - this feature is primarily a server-side data model, credential management and interaction pattern to be used with a mix of arbitrary agents and trusted agents

Some aspects to consider for this feature:

  • An access grant itself should not be a security credential
  • The data model for requests and grants should be simple, extensible, and rely on widely used vocabluaries
    • The data model should be independent of particular ACL layers (e.g., WAC or ACP) but it should be possible to map the data model to these ACL layers
  • Any protocol-specific requirements should align with the existing LWS protocol definitions
  • The feature should support both simple as well as more complex enterprise use cases.
  • An access request and grant should support various types of constraints, including temporal restrictions
  • This feature should integrate with LWS Notifications Feature #103

Metadata

Metadata

Labels

work-itemThis issue is part of an accepted LWS Work Item

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions