{"action":"created","issue":{"url":"https://api.github.com/repos/dauwhe/epub31-bff/issues/11","repository_url":"https://api.github.com/repos/dauwhe/epub31-bff","labels_url":"https://api.github.com/repos/dauwhe/epub31-bff/issues/11/labels{/name}","comments_url":"https://api.github.com/repos/dauwhe/epub31-bff/issues/11/comments","events_url":"https://api.github.com/repos/dauwhe/epub31-bff/issues/11/events","html_url":"https://github.com/dauwhe/epub31-bff/issues/11","id":139778395,"number":11,"title":"How does encryption.xml etc work in BFF?","user":{"login":"dauwhe","id":5687700,"avatar_url":"https://avatars.githubusercontent.com/u/5687700?v=3","gravatar_id":"","url":"https://api.github.com/users/dauwhe","html_url":"https://github.com/dauwhe","followers_url":"https://api.github.com/users/dauwhe/followers","following_url":"https://api.github.com/users/dauwhe/following{/other_user}","gists_url":"https://api.github.com/users/dauwhe/gists{/gist_id}","starred_url":"https://api.github.com/users/dauwhe/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dauwhe/subscriptions","organizations_url":"https://api.github.com/users/dauwhe/orgs","repos_url":"https://api.github.com/users/dauwhe/repos","events_url":"https://api.github.com/users/dauwhe/events{/privacy}","received_events_url":"https://api.github.com/users/dauwhe/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/dauwhe/epub31-bff/labels/Exploded","name":"Exploded","color":"f7c6c7"},{"url":"https://api.github.com/repos/dauwhe/epub31-bff/labels/Serialization","name":"Serialization","color":"006b75"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":9,"created_at":"2016-03-10T04:04:36Z","updated_at":"2016-03-10T21:21:52Z","closed_at":null,"body":"Mailing list thread:\r\n\r\nhttps://groups.google.com/forum/#!searchin/epub-working-group/Encryption$20in$20BFF$20land/epub-working-group/tU1c0e5z54k/DpGyAEgmBwAJ"},"comment":{"url":"https://api.github.com/repos/dauwhe/epub31-bff/issues/comments/195054938","html_url":"https://github.com/dauwhe/epub31-bff/issues/11#issuecomment-195054938","issue_url":"https://api.github.com/repos/dauwhe/epub31-bff/issues/11","id":195054938,"user":{"login":"dauwhe","id":5687700,"avatar_url":"https://avatars.githubusercontent.com/u/5687700?v=3","gravatar_id":"","url":"https://api.github.com/users/dauwhe","html_url":"https://github.com/dauwhe","followers_url":"https://api.github.com/users/dauwhe/followers","following_url":"https://api.github.com/users/dauwhe/following{/other_user}","gists_url":"https://api.github.com/users/dauwhe/gists{/gist_id}","starred_url":"https://api.github.com/users/dauwhe/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dauwhe/subscriptions","organizations_url":"https://api.github.com/users/dauwhe/orgs","repos_url":"https://api.github.com/users/dauwhe/repos","events_url":"https://api.github.com/users/dauwhe/events{/privacy}","received_events_url":"https://api.github.com/users/dauwhe/received_events","type":"User","site_admin":false},"created_at":"2016-03-10T21:21:52Z","updated_at":"2016-03-10T21:21:52Z","body":"*Hadrien Gardeur wrote (in the origin thread):*\r\n\r\nRegarding encryption.xml itself, we can:\r\ndo absolutely nothing about it\r\nlink to it in BFF and keep it as-is\r\nlink to it and do a JSON serialization of it\r\nSince our encryption.xml is based on specifications defined by W3C, I don't think that option 3 is a possibility. Depending on our need to support encryption (for example for the sake of roundtripability) we could either go with 1 and 2.\r\n\r\nA likely outcome of this discussion IMO is that we'll go with 2 just to make it easier to round-trip, but RS will simply ignore that link in BFF.\r\n\r\nAuthentication is a different discussion, but it's also a subject that we've tried to address for OPDS. There's a first draft for something we've called \"Authentication for OPDS\"[1] until now:\r\nit defines an authentication document in JSON\r\nthe document has information displayed to the user (label for different fields, logo, title, link to supporting resources) along with machine readable info about authentication flows available\r\nit also defines three different authentication flows, two based on OAuth and Basic Auth over HTTPS\r\nIt would be very easy to support a \"password based\" protection by using that specification along with BFF, or potentially introduce additional authentication flows for it. Such authentication could easily provide the exact same UX as something like LCP, or simply redirect to the content provider's website to authenticate the user.\r\n\r\nIt is already used by Feedbooks/Aldiko and by NYPL for Library Simplified, in both cases for OPDS (borrowing/buying or access to an online bookshelf) and I'd be happy to consider moving that work to the IDPF if there's any interest about it.\r\n\r\nHadrien\r\n\r\n[1] https://docs.google.com/document/d/1-_0HHt664bDjybtCauBJXUSDXiT-Clg1sZUVNxHyLjw/"}}