Subject: [Txauth] XYZ Update

From: Justin Richer <[email-masked]>
Date: Tue, 18 Feb 2020 22:33:46 -0500

Based on discussions on the list about including identity in the protocol, and inspired by Aaron Parecki’s blog post, I’ve added some simple user claims request and processing to XYZ. This is reflected in the draft spec text:

https://tools.ietf.org/html/draft-richer-transactional-authz-05

On the website (which has better explanations than what fit in the spec):

https://oauth.xyz/

And in our Java implementation of a client and AS:

https://github.com/bspk/oauth.xyz-java

Thanks especially to Aaron, Dick, and Annabelle for discussion of how these things can fit together.

 — Justin