storing "data transparency" in consent records

[Cantor, Scott]

> > if the APIs existed to access those records
> 
> Well, just noting that Java APIs exist in the IdP (actually OpenSAML) to access
> consent (or any kind of) StorageRecords. I imagine a REST-ish profile flow could
> be written to access them as well, but that assumes the records are stored
> server-side, which is not the IdP's default.

There's already a REST API to the storage layer, but the format of the records for consent in that layer are the undocumented part, as are all the bits we store there.

-- Scott