Re: VC HTTP API Endpoint Authz Needs (was: Re: Attempting to block work)

On 6/13/21 7:41 PM, Adrian Gropper wrote:
> No. As I understood Justin's SHOULD, it would require that test 
> suites include delegation.  "While this specification does not 
> define..." doesn't sound to me like a SHOULD.

Test suites don't test SHOULD statements (implementers typically
complain about SHOULD statements -- they always have a good reason why
their implementation doesn't implement the SHOULD)... you're really
looking for a MUST.

You're looking for something like this, then? (This really would be a
lot easier if you'd propose some concrete text instead of making us guess):

Implementations MUST/SHOULD support authorization delegation by using
technologies such as GNAP and Authorization Capabilities.

-- manu

-- 
Manu Sporny (skype: msporny, twitter: manusporny)
Founder/CEO - Digital Bazaar, Inc.
blog: Veres One Decentralized Identifier Blockchain Launches
https://tinyurl.com/veres-one-launches

Received on Monday, 14 June 2021 02:50:58 UTC