UMA Authorization Server

This package implements an UMA Authorization Service as defined by the User-Managed Access (UMA) 2.0 Grant for OAuth 2.0 Authorization specification and extended with

Details

This package uses the Components.JS semantic dependency injection framework in TypeScript, along with Digita's HandlersJS library.

Configurations

A default configuration for ComponentsJS dependency injection is provided in config/default.json. Note that this default configuration does not yet use Solid OIDC authentication, but rather allows for dummy tokens to authenticate with. Modules for enabling Solid OIDC authentication are present in the package, such that they can be swapped in.

Known limitations

Unused parameters in token request

For token requests with grant_type urn:ietf:params:oauth:grant-type:uma-ticket, the token endpoint will ignore paramters pct and scope defined as optional in section 3.3.1 of the specification.

Specification Extensions

Any extensions to the specifications will be added here, as defined by the Solid

Setup information