Thanks Eve and Maciej. I got that clear now :) On Wed, Sep 2, 2015 at 7:39 AM, Maciej Machulak wrote:

Hi Farazath,

Same here! Congratulations!

I agree with Eve. However, bear in mind that in some situations the RS should not even know which client is accessing the resource (the RS only has to know that a client CAN access this resource).

Cheers, Maciek

On 1 September 2015 at 15:43, Eve Maler wrote:

...

Hi Farazath— BTW, congratulations on completing your GSoC project!

Officially, the RS outsources all aspects of protection to the AS, so it doesn’t “recognize” clients in any in-band UMA way. E.g., it doesn’t see their client ID.

However, it’s free to use any contextual methods that it wants for observing and acting on requests for access. In fact, hmmm. Given the last couple of tweaks we just made to the specs in V1.0.1, where it’s not just “403 recommended and you’re on your own for any other status codes”, but “the RS can produce any status codes it wants as long as it uses the UMA header when it’s doing UMA”, you could theoretically add “preprocessing” and “postprocessing” trust elevation flows that are RS-specific.

(The user experience might get more and more horrible, though, depending on what impact it has on the requesting party. That’s for your authentication strategy to decide.)

Eve

On 31 Aug 2015, at 3:12 AM, Farazath Ahamed wrote:

Hi,

First of all thanks everyone for helping me out in this mailing list answering my questions that helped me a lot in getting through my GSoC. However, I am yet to complete my implementation. Therefore i will keep on pestering you with questions :)

Getting to the question, We use the PAT to register permissions using the Permission Registration endpoint of the Protection API, do we have a standard way of associating the client who requests for access from the UMA protected resource server?

Thanks -- *A.Farasath Ahamed* Undergraduate | Department of Computer Science and Engineering,University of Moratuwa Article Writer | MoraSpirit Mobile: +94 777 603 866 Blog: http://thepseudocode.blogspot.com E-Mail: mefarazath@gmail.com _______________________________________________ WG-UMA mailing list WG-UMA@kantarainitiative.org http://kantarainitiative.org/mailman/listinfo/wg-uma

Eve Maler | cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl | Calendar: xmlgrrl@gmail.com

_______________________________________________ WG-UMA mailing list WG-UMA@kantarainitiative.org http://kantarainitiative.org/mailman/listinfo/wg-uma

-- Maciej Machulak email: maciej.machulak@gmail.com mobile: +44 7999 606 767 (UK) mobile: +48 602 45 31 66 (PL)

-- *A.Farasath Ahamed* Undergraduate | Department of Computer Science and Engineering,University of Moratuwa Article Writer | MoraSpirit Mobile: +94 777 603 866 Blog: http://thepseudocode.blogspot.com E-Mail: mefarazath@gmail.com