Re: Standardization of OAuth2 server-to-server flows using DIF Presentation Exchange?

On Mon, Aug 7, 2023 at 10:35 AM Rein Krul <info@reinkrul.nl> wrote:
> Is there (previous) work on, or interest for, such a standard? Or do you know of any initiatives to standardize it?

Hi Rein,

There is a group of us that are working on something called the
Verifiable Credentials API, which does the sort of server-to-server
flows that you mention, where OAuth2 is one of the authentication
mechanisms in play. The VC API is a work item of the Credentials CG:

https://w3c-ccg.github.io/vc-api/

We do plan to take it onto the standards track once we have enough
implementation experience. There are portions of the API that were
utilized for the last Jobs for the Future plugfest (mostly the issuer
API portions), where a number of the VC API implementers used OAuth2
for the authentication mechanism (see slide #5):

https://docs.google.com/presentation/d/19GmJ3bLMrbVadesnkmsWaaUr-U71Y9Kr775tZvgs-xI/edit

Here are a number of implementers in the ecosystem demonstrating that
the API can be used to interop on credential issuance here (as well):

https://w3c-ccg.github.io/vc-api-issuer-test-suite/#Issue%20Credential%20-%20Data%20Integrity

For exchanging VCs, we provide these interfaces in the API (again,
OAuth2 could be used for server-to-server exchanges):

https://w3c-ccg.github.io/vc-api/#exchange-examples

All that said, while we plan to take the API standards track, we want
to make sure that we're addressing a variety of the diverse
server-to-server use cases in the ecosystem, which are being
documented here:

https://w3c-ccg.github.io/vc-api-use-cases/

Hope that helps. We have weekly calls (Tuesdays at 3pm ET) among a
group that is working on the specification. I hope that helps answer
some of the question you were asking. Do you have any further
questions on any of the above, Rein?

-- manu

-- 
Manu Sporny - https://www.linkedin.com/in/manusporny/
Founder/CEO - Digital Bazaar, Inc.
https://www.digitalbazaar.com/

Received on Tuesday, 8 August 2023 14:17:14 UTC