(r9) SessionDetails < IVOA

IVOA Web>IvoaEvents>InterOpNov2025>SessionDetails (revision 9) (raw view)~~EditAttach~~

---+ DSP Sessions:
---+ 15th November 2025 9:00-10:30 CET

| *Location* | *Time* |
| Washington DC, USA | Sat, 15 Nov 2025 at 4:00 AM |
| UTC, Time Zone | Sat, 15 Nov 2025 at 8:00 AM |
| Bristol, United Kingdom | Sat, 15 Nov 2025 at 8:00 AM |
| Beijing, China | Sat, 15 Nov 2025 at 4:00 PM |
| Paris, France | Sat, 15 Nov 2025 at 9:00 AM |
| Perth, Australia | Sat, 15 Nov 2025 at 4:00 PM |
| Victoria, Canada | Sat, 15 Nov 2025 at 00:00 AM |

*[ [[InterOpNov2025][back to main programme page]]]*
| *Wednesday June 4 @09:00 EDT: Room 2309* |||||
| *Speaker* | *Title* | *Time* | *Abstract* | *Material* |
| Dave Morris | <span data-end="217" data-start="106"> _Defining service interfaces with OpenAPI: Lessons for Machine-Readable IVOA Standards_ </span> | <p>15'</p> <p>9:00-9:15</p> | A report on our experiences defining a complex data model and service API using OpenAPI. What worked, what didn't, and where to go next | |
| Sara Bertocco | Discussion: _ExecutionBroker in Context: Lessons from Distributed Workflow Execution_ <p> </p> | <p>15'</p> <p>9:20-9:35</p> | ExecutionBroker defines a protocol for offering and managing workflow executions or interactive sessions across distributed and federated systems, such as those in the IVOA. In this talk, we place ExecutionBroker in its context, we examine experiences from related efforts, execution queues, and interface translations. We discuss how these examples inform best practices, highlight common challenges in distributed workflow execution, and draw lessons that can guide the ongoing development and adoption of ExecutionBroker within the IVOA ecosystem. | |
| Mark Taylor | _<nop>AuthVO Document Status_ | <p>15'</p> <p>9:35-9:50</p> | The [[https://github.com/ivoa-std/AuthVO][AuthVO]] document describes how VO services can advertise authentication methods to VO clients, especially non-browser clients. We briefly recap its content, presented at the last Interop, and note minor changes since then. The main unsolved issue with the current draft is support for OAuth 2.0-based authentication. We introduce the problem and outline progress so far in addressing it. | [[%ATTACHURL%/authvo.pdf][pdf]] |
| Jesus Salgado | <span data-end="283" data-start="198"> _Security Challenges in AuthVO: Managing Authorization Across Methods_ </span> | <p>15'</p> <p>09:50-10:05</p> | <span data-end="877" data-start="285">AuthVO defines multiple authorisation methods to support secure access to IVOA services in distributed environments. This talk examines the security challenges across these methods, including bearer tokens, delegated credentials, and other approaches standardised in AuthVO. We highlight practical considerations for token issuance, lifetimes, revocation, and secure handling. The session aims to provide guidance for ensuring robust, interoperable security while adopting the full range of AuthVO authorisation mechanisms.</span> | [[https://docs.google.com/presentation/d/1goJIkxgAJXnpGmOjM9-mm2doDT4Of4kP_1Nk2bxN2xo/][googlePresentation]]<br /> [[%ATTACHURL%/SalgadoIVOADSPNov2025.pdf][pdf]] |
| All | <span data-end="142" data-start="55"> _AuthVO Security and Standardization: Open Discussion and Brainstorming_ </span> | <p>25'</p> <p>10:05-10:30</p> | This session invites the community to explore security aspects of AuthVO and reflect on the standard as a whole. Topics for discussion include emerging threats, best practices for secure implementation, potential improvements to authorization methods, and strategies for broader adoption across IVOA services. The goal is to foster an open exchange of ideas, share experiences, and identify priorities for strengthening both the security and usability of AuthVO in the distributed virtual observatory ecosystem. | |
Notetakers: Collaborative

*notes: _( live notes, should expire around end of *****)_*