- From: Henry Story <henry.story@bblfish.net>
- Date: Wed, 30 Nov 2011 19:49:11 +0100
- To: bergi <bergi@axolotlfarm.org>
- Cc: WebID XG <public-xg-webid@w3.org>
I am thinking the following hierarchy seems to make a lot more sense now that I am implementing this in a more functional manner. In brackets '(...)' are the optional tests wit:certificateProvided wit:certificateOk wit:certificateProvided, wit:certificateDateOk, ( wit:privateKeyNegotiationSucceeded ) //most apps won't know how to make this fail wit:certificatePubkeyRecognised, //more accurately: recognised by WebId layer ( wit:certificateCriticalExtensionsOk ) // requires more research wit:certificateProvidedSAN // one for each SAN - tests if SAN is URL, for ex wit:webidClaim // if SAN is good, then we have a claim wit:profileOk // we can get profile and parse it wit:profileGet wit:profileWellFormed ( wit:profileWellFormedPubkey ) //match keys in profile wit:keyMatchProfile Then the main test: if there is a WebId authentication succeeds if one wit:webidClaim succeeds. The above seems to follow the causal sequence more precisely. I'll work along these lines just to see what that gives me. Henry On 30 Nov 2011, at 00:53, bergi wrote: > Yesterday I've changed my code according the latest changes in the spec. > My old version contained code which wasn't required to be spec > compliant, but to run all test cases defined in the test vocab. This was > caused by different approaches of the public key verification. With the > ASK SPARQL query the complete verification process is now atomic. Some > more test cases can now be marked as optional. Optional means in our > case that these tests may be useful for users to check their WebIDs and > give them more detailed hints what could case problems. Because the term > optional could be a little bit confusing I propose to use the term > "profile". "Authentication Profile" would be the group of test cases > defined by the spec 3.1. "Analyze Profile" contains all test cases > defined in the vocab. The test suite would require the Authentication > Profile. If we can agree upon that I will change the vocab and the wiki > page. > Independent from these changes I will update the test suite the next days. > > That's the new Authentication Profile ASCII diagram: > > wit:webidAuthentication > wit:webidClaim > wit:certificateOk > wit:profileOk > wit:profileGet > wit:profileWellFormed > wit:profileWellFormedPubkey > > >> [1] http://www.w3.org/2005/Incubator/webid/track/issues/9 > Social Web Architect http://bblfish.net/
Received on Wednesday, 30 November 2011 18:49:57 UTC