Reader-to-reader entitlement portability

[possiblyshellen]

Summary

Implement standardized mechanisms for transferring an active OPE subscription between reader clients without requiring re-authentication.

Context

Listed under Future Work Section 24. Currently, when a user switches reader apps, they must re-authenticate with each publisher separately.

Responsibilities

• Define a standard protocol for transferring active grant tokens/refresh tokens between readers
• Address security concerns (trust relationships, token validity during transfer)
• Consider user consent requirements and privacy implications

Related

Spec sections: 12.3 Refresh Token Rotation, 13 Multi-Publisher Session Management, Future Work