Proposal: change webid claim to solid
Nobody has claimed this yet.
- Dominant language
- Bikeshed
- Stars
- 26
- Forks
- 14
- PR merge metrics
- No merged PRs in 30d
Description
This is a proposal to change the webid claim to solid in access tokens and ID tokens.
The background for this is severalfold:
- The current
webidclaim is very WebID specific, and WebIDs are (according to the draft WebID specification) limited to HTTPS URLs. If other types of identifiers are to be supported (e.g. DIDs, VCs), placing those in thewebidclaim is questionable. Asolidclaim would therefore be more flexible and, arguably, forward looking. - The names used by Solid-OIDC have generally been moving toward "Solid" and away from "WebID". The specification name is
Solid-OIDC(it was formerlyWebID-OIDC). The audience claim for access tokens uses a value ofsolidto indicate that the token should be used with the Solid ecosystem. - WebIDs will continue to be supported with a
solidclaim and will likely continue to be the main identifier format for agents in the near term - There is a discussion to use a scope value with Solid-OIDC, and there is an indication that this scope could be
solid. If the name of that scope is, in fact,solid, then using asolidclaim in the resulting tokens would make for a simple, consistent naming structure.
If the name of this claim is changed to solid, we should constrain the value(s) to be IRIs.
This change would place no new requirements on Solid components to support DIDs, but it does make support of DIDs more possible for the future.
This change would require adjustments on client apps (RP), Pod servers (RS) and identity providers (OP).
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reading the Solid-OIDC specification sections defining access-token and ID-token claims, then review the discussion in issue 29 about the proposed scope value. Done means reaching agreement on the claim name and IRI constraint and updating the specification to account for the affected RP, RS, and OP components.
Written by the indexing model from the issue text.
Assessment
- Domain
- authentication, authorization
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100