> -----Original Message-----
> From: oauth@googlegroups.com [mailto:oa...@googlegroups.com] On Behalf
> Of Eric (Google)
> Sent: Tuesday, May 12, 2009 5:45 PM
> To: OAuth
> Subject: [oauth] Re: OAuth Core 1.0 Rev A, Draft 3
> 
> 
> Section 6.2.3 states:
> "The callback URL MAY include Consumer provided query parameters. The
> Service Provider MUST retain them unmodified and append the
> oauth_token parameter to the existing query."
> 
> That last sentence should probably include oauth_verifier for
> consistency:
> "...retain them unmodified and append the oauth_token and
> oauth_verifier parameters to the existing query."

Smarr just said the same thing to me... I'll change it to:

The Service Provider MUST retain them unmodified and append the
OAuth parameters to the existing query.

> My real question:
> Can the consumer's custom params be added after the request token
> step?
> (i.e. having not been included in the RT's oauth_callback)

Not without an extension. Note that 1.0a does not support the oauth_callback 
parameter on the authorization step.

EHL


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"OAuth" group.
To post to this group, send email to oauth@googlegroups.com
To unsubscribe from this group, send email to oauth+unsubscr...@googlegroups.com
For more options, visit this group at http://groups.google.com/group/oauth?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to