Alex Babeanu
Alex Babeanu
see previous comment... I'd rather suggest `id` to be mandatory, any String, + add any attributes as needed, at the discretion of the implementers... Or else, then provide a list...
My only concerns about these Subject attributes is that they are geared towards human Subjects. A smart IoT device or a Web Service could also be Subjects. Seems to me...
There are also "Custom Actions". https://github.com/openid/authzen/blob/main/authorization-api-1_0.md#custom-actions
I like this idea...
This should be left as an open string imho, implementers should be able to use whatever string format here. The provided example has a Mac address, but this could easily...
I think these implementation-specific considerations shouldn't be in the standard. There's a variety of ways you could implement your authzen endpoint to support your needs. If we start adding implementation...
Agreed too, array of string seems sufficient to me.