OpenID Connect Advanced Syntax for Claims скачать в хорошем качестве

OpenID Connect Advanced Syntax for Claims

Presented by Daniel Fett at the OAuth Security Workshop 2021 OpenID Connect Advanced Syntax for Claims defines an extension of OpenID Connect to enable new features for requesting and receiving Claims and meta information about Claims. The specification defines two independent extensions, Selective Abort/Omit (SAO) and Transformed Claims (TC). SAO gives RPs the tools to define what behavior they expect when data about the End-User is not available, does not match the RP's expectations, or cannot be released for other reasons. This ensures that data is only transferred when it is useful for the RP, helping privacy and avoiding billing of data useless to the RP. Transformed Claims defines a syntax and functions for deriving new Claims from existing Claims. This enables new use cases like age verification, the release of selected data from combined Claims (like the ZIP code), and new filters (like value/values) without the introduction of custom Claims. Thanks to Predefined Transformed Claims (PTC), this specification can be implemented with minimal overhead.