Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add detailed explanation about several key points in Rich Authorization Requests doc #23525

Open
ShanChathusanda93 opened this issue Mar 20, 2025 · 0 comments

Comments

@ShanChathusanda93
Copy link
Contributor

Document issue type

Type/Improvement (Suggest changes to enhance the clarity, usability, or accuracy of existing content)

Description

In [1] we have the RAR doc which contains steps to configure the feature in IS. However several key elementas are missing in this doc.

  1. Rich Authorization Requests (RAR) (RFC 9396) enhance authorization mechanisms -> Needs to have the RFC link
  2. Step 1: Register a new authorization details type -> Need to explain about what is the spec is mandating and the scenario that the doc is explaning since the doc contains a sample scenario.
  3. Step 3: Customize authorization details validation -> Need to explain how this customization works with custom scenarios. We can use the same scenario that we used in the 2nd point. Also if we can add some sample codes to the methods it will be great.
  4. At the end of the doc we can also mention how the APIs are working with this authorization details.

[1] https://is.docs.wso2.com/en/latest/guides/authorization/rich-authorization-requests/#configuring-your-application-for-rar

Version

IS 7.1.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant