Re: [xri] OpenID Delegating relationship in XRD

[Will Norris <will@willnorris.com>]

On Sep 3, 2009, at 9:57 PM, Nat Sakimura wrote:

> Hi.
>
> I just to want to refresh my memory on this.
>
> "How do we represent delegating relationship in XRD/Link ?"
>
> In the scenario, a user with claimed identifer http://sakimura.org/nat
> may want to authenticate at an op, say, http://myop.com
> and the LocalID for that OP is http://myope.com/nat.sakimura.
>
> XRD would look like:
>
> <XRD xmlns="http://docs.oasis-open.org/ns/xri/xrd-1.0"; xml:id="foo">
>    <Expires>1970-01-01T00:00:00Z</Expires>
>    <Subject>http://sakimura.org/nat</Subject>
>    <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>
>      ....
>    </ds:Signature>
>    <Link>
>        <Rel>http://openid.net/rel/my_op</Rel>
>        <URI>http://myop.com/#</URI>
>    </Link>
> </XRD>
>
> I do not remeber how to put this LocalID into this XRD/Link.
> Should it be something like /XRD/Link/openid:LocalID ?

the only difference is that now extension elements are inside of an  
<Extensions> wrapper.  So your example would be:

<XRD xmlns="http://docs.oasis-open.org/ns/xri/xrd-1.0"; xml:id="foo">
    <Expires>1970-01-01T00:00:00Z</Expires>
    <Subject>http://sakimura.org/nat</Subject>
    <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>
      ....
    </ds:Signature>
    <Link>
        <Extensions>
            <openid:LocalID xmlns:openid="...">http://myope.com/ 
nat.sakimura</openid:LocalID>
        </Extensions>
        <Rel>http://openid.net/rel/my_op</Rel>
        <URI>http://myop.com/#</URI>
    </Link>
</XRD>

(this new Extensions wrapper element is necessary to ensure that the  
XRD schema's data model is unambiguous.  You can find the conversation  
thread on the list)

-will