Incorporate in the IETF Internet Draft all suggested changes following implementations from all other Milestones

[mickenordin]

[glpatcern]

Preliminary simplified list of changes to the spec from WG adoption to now, targeting a 01 edition of the draft in the datatracker and possibly a v1.3 tag of the spec:

• 894cb57 - JWKS: Remove publicKeys in favor of RFC7515. OCM-API#319
• 721c2f9 - Improve resource access description with token exchange OCM-API#321 (2 days ago)
• 88f5333 - Specify request payload format for token request OCM-API#320 (2 days ago)
• fa936fb - Add JSContact extension to IANA Considerations OCM-API#318 (2 days ago)
• 0ec7ec2 - Add functions, roles, and object models to draft OCM-API#297 (3 weeks ago)
• 8a81915 - Change my-cloud-storage.org -> cloud.example.org OCM-API#316 (3 weeks ago)
• d154140 - Updated and homogenized capabilities OCM-API#315 (3 weeks ago)
• d29618a - Add RFC 9421 support via rfc-http-sig capability and publicKeys array OCM-API#305 (5 weeks ago)
• 10eea7a - Feat: add support for ssh OCM-API#308 (5 weeks ago)
• 9b67e11 - Prescribe use of JWS for Directory Service OCM-API#309 (5 weeks ago)
• 13558ec - Feat: introduce accessType property in a share and remove the datatx "protocol" OCM-API#307 (5 weeks ago)

[The last entries were prepared in 2025, before this Milestone started yet after the STA project started. They are reported for completeness]

[glpatcern]

In preparation of the M10 report, this is the list of all relevant changes applied to the I-Ds:

• a9f0426 - Improved phrasing for jwksUri, fixes #394 (Improved phrasing for jwksUri, fixes #394 OCM-API#403)
• 1351d1a - Move encryption to the main I-D (Move encryption to the main I-D OCM-API#402)
• 5469abf - Notifications rehaul (Notifications rehaul OCM-API#400)
• 6a05861 - Fix http(s) and update replay protection text
• 9b73156 - Align remaining sections with the revised HTTPSig model
• 918370a - Use Content-Digest instead of legacy Digest in Token Request example
• 12bd2e7 - Require the keyid signature parameter to match the JWK kid
• 448fc29 - Derive the signature algorithm from the JWK, not a fixed list
• 9608d74 - Discover JWKS via jwksUri instead of /.well-known/jwks.jso
• 49a99a8 - Do not cover the Date header in HTTP Message Signatures (Address reviewer feedback on httpsig OCM-API#391)
• a5b5da6 - Rework OCM-API diagrams, sync OpenAPI to draft (Rework OCM-API diagrams, sync OpenAPI to draft OCM-API#390)
• ad33370 - Regenerate IETF XML files (Regenerate IETF XML files OCM-API#389)
• 8ecad22 - Added changelog for datatracker (Added changelog for datatracker OCM-API#388)
• 4024269 - IANA: Address early review feedback
• 54898a3 - Mention IANA registries for sigatures and hash algorithms.
• 18457c7 - OCM/OCM-MLS: Standardize on base64url (OCM/OCM-MLS: Standardize on base64url OCM-API#383)
• 97b8108 - Added references to IANA registry in the Discovery payload
• ad3ee66 - Add IANA registries
• 7c7fddb - OCM-IP: First draft of the I-D document.
• 2b4cdf1 - Removed the already deprecated draft-cavage pubkey
• 3d095ec - update(ocm): refine webapp share protocol
• fe97123 - Update webapp share I-D text
• bb275aa - First pass to rename criteria in a more consistent way (Rename criteria in a more consistent way OCM-API#366)
• edd561c - Change sender to owner
• 308ef0c - RequestShare: Introduce the notion of a share request
• 6583542 - Various fixes for http-sig (Various fixes for http-sig OCM-API#362)
• 8106946 - fix(ocm-api): tighten decision table prose
• a3ba544 - add(ocm-api): add code flow decision table
• 7a5ef10 - fix(ocm-api): clarify share token flow
• 9fd7946 - fix(ocm-api): clarify discovery token roles
• a1311af - Drop legacy ocm-provider discovery endpoint
• 510c4e9 - Clearify copyright status of specification for DFSG compatibility.
• 00ac43c - Added Changes section to the Draft
• 76bf657 - Rewrite Appendix B with RFC9421 HTTP signature examples
• 1eb02f8 - Remove example for deprecated functionality
• 894cb57 - JWKS: Remove publicKeys in favor of RFC7515.
• 721c2f9 - Improve resource access description with token exchange (Improve resource access description with token exchange OCM-API#321)
• 88f5333 - Specify request payload format for token request (Specify request payload format for token request OCM-API#320)
• fa936fb - Add JSContact extension to IANA Considerations (Add JSContact extension to IANA Considerations OCM-API#318)