Solid Roles

[elf-pavlik]

During the last panel meeting, we started documenting distinct roles in Solid Ecosystem:

• WebID
  • has one to many Identity Provider(s) solid:oidcIssuer
  • has one to many Authorization Agent(s) interop:hasAuthorizationAgent
    • Matthieu: Is it a good idea to define it here?
    • ...: I would probably define it on the AS level.
    • Wouter: Why would I as a resource owner want to restrict the authorization agent that another user can use?
• Identity Provider
  • linked from WebID Profile (can provide identity for many users/WebIDs)
• Authorization Agent
  • has one to many WebID Profile(s)
  • linked from WebID Profile (can manage authorization for many users/WebIDs)
• Resource Server - solid storage
  • has one Authorization Server WWW-Authenticate: as_uri=https://as.example
• Authorization Server
  • has one to many Authorization Agent(s)
  • can manage many Resource Servers
• Client (application)
  • day to day domain specific app - project management, calendar, game
  • specialized app, data browser, authorization manager
    • Matthieu: How is the authorization manager different from the authorization agent?