r2.1

Release Notes

This pre-release contains the definition and documentation of:

• "Identity and Consent Management" v0.3.0-alpha.1

NOTE: The Working Group release numbering has been updated to adopt the same release notation as is used for API sub-projects.

Added

• Recommend signed authentication requests for CIBA by @eric-murray in #217
• Operator token login_hint format by @AxelNennker in #218

Changed

• Updated the CAMARA-Security-Interoperability.md document to replace Telco and Operator terms with API Provider by @AxelNennker in #201
• Updated terms and definitions in the CAMARA-API-access-and-user-consent.md for better writing and understanding by @jpengar and @chrishowell in #212
• Updated the CAMARA-API-access-and-user-consent.md document with editorial and general writing improvements by @jpengar and @chrishowell in #213

Fixed

• Fixed error description for missing openid scope in the CAMARA-Security-Interoperability.md document by @AxelNennker in #210
• Clarify case sensitivity of parameter names and values in the CAMARA-Security-Interoperability.md document by @eric-murray in #221

Removed

N/A

Full Changelog: r0.2.1...r2.1

r0.2.1

This is the public release of "Identity And Consent Management" version 0.2.1, a patch release from r0.2.0

Please note:

• The r0.2.1 release is a patch release of r0.2.0. Please read also the release notes and changes of r0.2.0.

Fixed

• Fixed broken W3C Data Privacy Vocabulary (DPV) reference links in ICM documentation by @jpengar in #196

Full Changelog: r0.2.0...r0.2.1

r0.2.0

This is the public release of "Identity And Consent Management" version 0.2.0

Please note:

• The content of the release includes the "Identity And Consent Management" approved deliverables in documentation folder.
• The document Authentication and Authorization Concept for Service APIs was part of the 0.1.0 release. It has been deprecated and been removed in the course of the public release of "Identity and Consent Management" version 0.2.0.

Main Changes

• Creation of the CAMARA Security and Interoperability Profile document.
• Creation of the Identity and Consent Management Examples document.
• Aligment of the CAMARA APIs access and user consent management document with the latest decisions of the working group in the new profile.

Added

• Added paragraph describing the handling on authorization flow selection during API product ordering in the CAMARA-API-access-and-user-consent.md document by @Elisabeth-Ericsson in #120
• Added the CAMARA-Security-Interoperability.md profile document by @AxelNennker in #121
• Added the CAMARA-ICM-examples.md document by @AxelNennker in #148
• Added 2-legged/3-legged access token definition to CAMARA-API-access-and-user-consent.md document by @jpengar in #162

Changed

• Clarified resource server terminology by @Elisabeth-Ericsson in #135
• Updated the CAMARA-API-access-and-user-consent.md document with the latest decisions of the working group in the new profile by @jpengar in #155
• Adapted the info.description template in CAMARA-API-access-and-user-consent.md document to "CAMARA Security and Interoperability Profile" by @AxelNennker in #168
• Editorial changes to CAMARA-API-access-and-user-consent.md by @AxelNennker in #183
• Replaced link into main branch of Identity and Consent Management within "Authorization and authentication" text template (need to be applied to all APIs who have copied the template previously) by @hdamker in #186
• Replace internal links between icm documents with relative links by @hdamker in #188

Fixed

• Fixed Auth code flow error scenario when user refuses consent in CAMARA-API-access-and-user-consent.md document by @jpengar in #170.
• Fix returned error in authentication code flow by @garciasolero in #180
• Fixed the release tag according to Release Management Working Group guidelines.

Removed

• Removed deprecated CAMARA-AuthN-AuthZ-Concept.md document by @jpengar in #192

New Contributors

• @Elisabeth-Ericsson made their first contribution in #120
• @AxelNennker made their first contribution in #121
• @hdamker made their first contribution in #147
• @garciasolero made their first contribution in #180

Full Changelog: v0.1.0...r0.2.0

r0.2.0-rc.2

This is the second release candidate version for "Identity And Consent Management" release 0.2.0

Please note:

• This is a bugfix release.

Main Changes

• Replaced link into main branch of Identity and Consent Management within "Authorization and authentication" text template (need to be applied to all APIs who have copied the template previously)

Added

• N/A

Changed

• Editorial changes to CAMARA-API-access-and-user-consent.md by @AxelNennker in #183
• Replaced link into main branch of Identity and Consent Management within "Authorization and authentication" text template (need to be applied to all APIs who have copied the template previously) by @hdamker in #186
• Replace internal links between icm documents with relative links by @hdamker in #188

Fixed

• Fix returned error in authentication code flow by @garciasolero in #180
• Fixed the release tag according to Release Management Working Group guidelines.

Removed

• N/A

New Contributors

• @garciasolero made their first contribution in #180

Full Changelog: v0.2.0-rc.1...r0.2.0-rc.2

v0.2.0-rc.1

This is the release candidate version for "Identity And Consent Management" release 0.2.0

Please note:

• The working group agreed to proceed directly with a Release Candidate version, bypassing the ALPHA release, given the stability and closed scope of the 0.2.0 release.
• The content of the release includes the "Identity And Consent Management" approved deliverables in documentation folder.
• The document Authentication and Authorization Concept for Service APIs is part of the 0.1.0 release. It is deprecated. It will be removed after the 0.2.0 public release of "Identity and Consent Management".

Main Changes

• Creation of the CAMARA Security and Interoperability Profile document.
• Creation of the Identity and Consent Management Examples document.
• Aligment of the CAMARA APIs access and user consent management document with the latest decisions of the working group in the new profile.

Added

• Added paragraph describing the handling on authorization flow selection during API product ordering in the CAMARA-API-access-and-user-consent.md document by @Elisabeth-Ericsson in #120
• Added the CAMARA-Security-Interoperability.md profile document by @AxelNennker in #121
• Added the CAMARA-ICM-examples.md document by @AxelNennker in #148
• Added 2-legged/3-legged access token definition to CAMARA-API-access-and-user-consent.md document by @jpengar in #162

Changed

• Clarified resource server terminology by @Elisabeth-Ericsson in #135
• Updated the CAMARA-API-access-and-user-consent.md document with the latest decisions of the working group in the new profile by @jpengar in #155
• Adapted the info.description template in CAMARA-API-access-and-user-consent.md document to "CAMARA Security and Interoperability Profile" by @AxelNennker in #168

Fixed

• Restored CAMARA-AuthN-AuthZ-Concept.md document with deprecation disclaimer by @hdamker in #147
• Fixed Auth code flow error scenario when user refuses consent in CAMARA-API-access-and-user-consent.md document by @jpengar in #170.

Removed

• N/A

New Contributors

• @Elisabeth-Ericsson made their first contribution in #120
• @AxelNennker made their first contribution in #121
• @hdamker made their first contribution in #147

Full Changelog: v0.1.0...v0.2.0-rc.1

v0.1.0

Initial version of guidelines and documentation that represents the short-term solution agreed in this working group for accessing CAMARA APIs, to be used as a baseline.

Please note:

The content of the release includes:

• Identity And Consent Management approved deliverables in documentation folder:

  • CAMARA-API-access-and-user-consent.md - This document defines guidelines for telco operator API exposure platforms to manage CAMARA API access and user consent (when applicable). This document is the result of the agreements reached in this working group and sets the stage for future discussions. The major contents of the document added for this baseline release are:
    • Glossary of Terms and Concepts
    • Applying purpose concept in the authorization request
    • Authorization flows / grant types
      • Authorization code flow (Frontend flow)
      • CIBA flow (Backend flow)
      • Client Credentials
    • CAMARA API Specification - Authorization and authentication common guidelines
  • CAMARA-AuthN-AuthZ-Concept.md - This document provides general information and generic recommendations about the authentication and authorization concept based on CAMARA scenarios. It is inherited from the original documentation of the Commonalities WG. It was moved to this repository in July 2023, when the Commonalities discussions started to take place in a separate Github repository: https://github.com/camaraproject/Commonalities.

Full Changelog: https://github.com/camaraproject/IdentityAndConsentManagement/commits/v0.1.0