Please be aware that the project will have frequent updates to the main branch. There are no compatibility guarantees associated with code in any branch, including main, until it has been released. For example, changes may be reverted before a release is published. For the best results, use the latest published release.
The below sections record the changes in each release as follows:
- for an alpha release, the delta with respect to the previous release
- for the first release-candidate, all changes since the last public release
- for subsequent release-candidate(s), only the delta to the previous release-candidate
- for a public release, the consolidated changes since the previous public release
This pre-release contains the definition and documentation of:
- "Identity and Consent Management" v0.3.0-alpha.1
NOTE: The Working Group release numbering has been updated to adopt the same release notation as is used for API sub-projects.
- Recommend signed authentication requests for CIBA by @eric-murray in #217
- Operator token login_hint format by @AxelNennker in #218
- Updated the
CAMARA-Security-Interoperability.mddocument to replace Telco and Operator terms with API Provider by @AxelNennker in #201 - Updated terms and definitions in the
CAMARA-API-access-and-user-consent.mdfor better writing and understanding by @jpengar and @chrishowell in #212 - Updated the
CAMARA-API-access-and-user-consent.mddocument with editorial and general writing improvements by @jpengar and @chrishowell in #213
- Fixed error description for missing openid scope in the
CAMARA-Security-Interoperability.mddocument by @AxelNennker in #210 - Clarify case sensitivity of parameter names and values in the
CAMARA-Security-Interoperability.mddocument by @eric-murray in #221
N/A
Full Changelog: https://github.com/camaraproject/IdentityAndConsentManagement/compare/r0.2.1...r2.1
This is the public release of "Identity And Consent Management" version 0.2.1, a patch release from r0.2.0
- The r0.2.1 release is a patch release of r0.2.0. Please read also the release notes and changes of r0.2.0.
- Fixed broken W3C Data Privacy Vocabulary (DPV) reference links in ICM documentation by @jpengar in #196
Full Changelog: https://github.com/camaraproject/IdentityAndConsentManagement/compare/r0.2.0...r0.2.1
This is the public release of "Identity And Consent Management" version 0.2.0
- The content of the release includes the "Identity And Consent Management" approved deliverables in documentation folder.
- The document Authentication and Authorization Concept for Service APIs was part of the 0.1.0 release. It has been deprecated and been removed in the course of the public release of "Identity and Consent Management" version 0.2.0.
- Creation of the CAMARA Security and Interoperability Profile document.
- Creation of the Identity and Consent Management Examples document.
- Aligment of the CAMARA APIs access and user consent management document with the latest decisions of the working group in the new profile.
- Added paragraph describing the handling on authorization flow selection during API product ordering in the
CAMARA-API-access-and-user-consent.mddocument by @Elisabeth-Ericsson in #120 - Added the
CAMARA-Security-Interoperability.mdprofile document by @AxelNennker in #121 - Added the
CAMARA-ICM-examples.mddocument by @AxelNennker in #148 - Added 2-legged/3-legged access token definition to
CAMARA-API-access-and-user-consent.mddocument by @jpengar in #162
- Clarified resource server terminology by @Elisabeth-Ericsson in #135
- Updated the
CAMARA-API-access-and-user-consent.mddocument with the latest decisions of the working group in the new profile by @jpengar in #155 - Adapted the
info.descriptiontemplate inCAMARA-API-access-and-user-consent.mddocument to "CAMARA Security and Interoperability Profile" by @AxelNennker in #168 - Editorial changes to CAMARA-API-access-and-user-consent.md by @AxelNennker in #183
- Replaced link into main branch of Identity and Consent Management within "Authorization and authentication" text template (need to be applied to all APIs who have copied the template previously) by @hdamker in #186
- Replace internal links between icm documents with relative links by @hdamker in #188
- Fixed Auth code flow error scenario when user refuses consent in
CAMARA-API-access-and-user-consent.mddocument by @jpengar in #170. - Fix returned error in authentication code flow by @garciasolero in #180
- Fixed the release tag according to Release Management Working Group guidelines.
- Removed deprecated
CAMARA-AuthN-AuthZ-Concept.mddocument by @jpengar in #192
- @Elisabeth-Ericsson made their first contribution in #120
- @AxelNennker made their first contribution in #121
- @hdamker made their first contribution in #147
- @garciasolero made their first contribution in #180
Full Changelog: https://github.com/camaraproject/IdentityAndConsentManagement/compare/v0.1.0...r0.2.0
This is the second release candidate version for "Identity And Consent Management" release 0.2.0
- This is a bugfix release.
- Replaced link into main branch of Identity and Consent Management within "Authorization and authentication" text template (need to be applied to all APIs who have copied the template previously)
- N/A
- Editorial changes to CAMARA-API-access-and-user-consent.md by @AxelNennker in #183
- Replaced link into main branch of Identity and Consent Management within "Authorization and authentication" text template (need to be applied to all APIs who have copied the template previously) by @hdamker in #186
- Replace internal links between icm documents with relative links by @hdamker in #188
- Fix returned error in authentication code flow by @garciasolero in #180
- Fixed the release tag according to Release Management Working Group guidelines.
- N/A
- @garciasolero made their first contribution in #180
Full Changelog: https://github.com/camaraproject/IdentityAndConsentManagement/compare/v0.2.0-rc.1...r0.2.0-rc.2
This is the release candidate version for "Identity And Consent Management" release 0.2.0
- The working group agreed to proceed directly with a Release Candidate version, bypassing the ALPHA release, given the stability and closed scope of the 0.2.0 release.
- The content of the release includes the "Identity And Consent Management" approved deliverables in documentation folder.
- The document Authentication and Authorization Concept for Service APIs is part of the 0.1.0 release. It is deprecated. It will be removed after the 0.2.0 public release of "Identity and Consent Management".
- Creation of the CAMARA Security and Interoperability Profile document.
- Creation of the Identity and Consent Management Examples document.
- Aligment of the CAMARA APIs access and user consent management document with the latest decisions of the working group in the new profile.
- Added paragraph describing the handling on authorization flow selection during API product ordering in the
CAMARA-API-access-and-user-consent.mddocument by @Elisabeth-Ericsson in #120 - Added the
CAMARA-Security-Interoperability.mdprofile document by @AxelNennker in #121 - Added the
CAMARA-ICM-examples.mddocument by @AxelNennker in #148 - Added 2-legged/3-legged access token definition to
CAMARA-API-access-and-user-consent.mddocument by @jpengar in #162
- Clarified resource server terminology by @Elisabeth-Ericsson in #135
- Updated the
CAMARA-API-access-and-user-consent.mddocument with the latest decisions of the working group in the new profile by @jpengar in #155 - Adapted the
info.descriptiontemplate inCAMARA-API-access-and-user-consent.mddocument to "CAMARA Security and Interoperability Profile" by @AxelNennker in #168
- Restored
CAMARA-AuthN-AuthZ-Concept.mddocument with deprecation disclaimer by @hdamker in #147 - Fixed Auth code flow error scenario when user refuses consent in
CAMARA-API-access-and-user-consent.mddocument by @jpengar in #170.
- N/A
- @Elisabeth-Ericsson made their first contribution in #120
- @AxelNennker made their first contribution in #121
- @hdamker made their first contribution in #147
Full Changelog: https://github.com/camaraproject/IdentityAndConsentManagement/compare/v0.1.0...v0.2.0-rc.1
Initial version of guidelines and documentation that represents the short-term solution agreed in this working group for accessing CAMARA APIs, to be used as a baseline.
The content of the release includes:
-
Identity And Consent Management approved deliverables in documentation folder:
- CAMARA-API-access-and-user-consent.md - This document defines guidelines for telco operator API exposure platforms to manage CAMARA API access and user consent (when applicable). This document is the result of the agreements reached in this working group and sets the stage for future discussions. The major contents of the document added for this baseline release are:
- CAMARA-AuthN-AuthZ-Concept.md - This document provides general information and generic recommendations about the authentication and authorization concept based on CAMARA scenarios. It is inherited from the original documentation of the Commonalities WG. It was moved to this repository in July 2023, when the Commonalities discussions started to take place in a separate Github repository: https://github.com/camaraproject/Commonalities.
Full Changelog: https://github.com/camaraproject/IdentityAndConsentManagement/commits/v0.1.0