# Meeting Notes 2024-12-10 ## Attendees Gerry Gebel Michiel Trimpe Shikha Alex Babeanu Nicola Gallo David Hyland Antono Radesca Michael Schwartz Elie Azerad ## Agenda - AuthZEN at Gartner! - Review Partial Evaluation API proposal (Vladi) - https://hackmd.io/@oidf-wg-authzen/HkLiZVdb1l ## Notes - There was some general discussion on the partial evaluation API proposal that Vladi wrote but he was not able to attend today's call so we will defer that to the next meeting - Mike: Discovery endpoint will be included in the list of APIs? - yes, that was decided last week. - Mike said he would be willing to share what they have already built when the WG starts talking about that endpoint - Mike: Cedarling project includes an AuthZEN API support (Mike is doing a webinar on this next week) - Michiel: Talking with internal team about implementing AuthZEN in home-grown api gateway and the had questions on how to map HTTP requests to the AuthZEN data model - Mike - mapping may still be somewhat platform specific. In Cedarling, they used method (POST, GET, etc) as action and url as resource. - David - Ping authorize has a number of plugins for different API gateways and include the mapping in the plugin (for request and response) - David H has also looked at some standards and drafted a proposal that allow (grant management API) to use an evaluation endpoint. You need to , from an oauth client perspective, account on what client can do on behalf of subject.