On Fri, Jan 28, 2011 at 10:25 AM, Eran Hammer-Lahav <e...@hueniverse.com> wrote: > -12 3.1.1: > > The redirection URI MUST be an absolute URI and MAY include a query > component, which MUST be retained by the authorization server when > adding additional query parameters. > > 'oob' is not an absolute URI.
Good point, I missed the absolute part. Thanks for pointing this out. Let me think about it, the URN you suggested is a good start. Marius _______________________________________________ OAuth mailing list OAuth@ietf.org https://www.ietf.org/mailman/listinfo/oauth