View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
000768410000-006: MappingsSpecpublic2022-01-31 15:332023-01-03 16:40
ReporterJeff Harding Assigned ToRandy Armstrong  
PrioritynormalSeveritymajorReproducibilityhave not tried
Status closedResolutionfixed 
Product Version1.05.01 
Fixed in Version1.05.03 RC1 
Summary0007684: Clarification needed for JWT encoding of roles
Description

The description in Part 6 Table 45 Access Token Claims of the roles field isn't clear enough.
Unlike Table 44 which explicitly states a Type Table 45 leaves the types up for interpretation.

The roles description is not specific enough either. The statement "Usually a list of unique identifiers ..." could be a unique role name, a NodeId of a role or anything else a Vendor decides to use. Which is it or do we allow a vendor to decide what they think it should be and if so it will not be interoperable between vendors. The statement "These values are typically mapped to the Roles defined in OPC 10000-3" suggests they can be anything a vendor decides to use. Should we be requiring a standard use of this field?

TagsNo tags attached.
Commit Version
Fix Due Date

Activities

Jim Luth

2022-02-01 17:35

administrator   ~0015907

We reviewed this and agreed the clarifications necessary for this belong in Part 18.

Jim Luth

2022-03-11 16:19

administrator   ~0016352

Last edited: 2022-03-11 16:22

Agreed to change text in Part 6

from

"Usually as list of unique identifiers for roles..."

to

"Roles are list of unique names for roles..."

Change last sentence to: "These values are typically mapped to the Roles defined in OPC 10000-3 using the identity mappings defined in OPC 10000-18."

Randy Armstrong

2022-12-27 11:43

administrator   ~0018351

Updated text in 6.5.2 explain link between roles and IdentityMappingRules.

Jim Luth

2023-01-03 16:40

administrator   ~0018388

Agreed to changes in telecon.

Issue History

Date Modified Username Field Change
2022-01-31 15:33 Jeff Harding New Issue
2022-02-01 17:28 Jim Luth Assigned To => Randy Armstrong
2022-02-01 17:28 Jim Luth Status new => assigned
2022-02-01 17:35 Jim Luth Note Added: 0015907
2022-02-01 17:36 Jim Luth Project 10000-006: Mappings => 10000-018: Role-Based Security
2022-03-11 16:19 Jim Luth Note Added: 0016352
2022-03-11 16:20 Jim Luth Project 10000-018: Role-Based Security => 10000-006: Mappings
2022-03-11 16:22 Jim Luth Note Edited: 0016352
2022-12-27 11:43 Randy Armstrong Status assigned => resolved
2022-12-27 11:43 Randy Armstrong Resolution open => fixed
2022-12-27 11:43 Randy Armstrong Fixed in Version => 1.05.03 RC1
2022-12-27 11:43 Randy Armstrong Note Added: 0018351
2023-01-03 16:40 Jim Luth Status resolved => closed
2023-01-03 16:40 Jim Luth Note Added: 0018388