Space is allowed inside a quoted string and is already not allowed inside each 
scope string.

EHL

> -----Original Message-----
> From: Julian Reschke [mailto:[email protected]]
> Sent: Tuesday, October 18, 2011 6:50 AM
> To: Eran Hammer-Lahav
> Cc: Hannes Tschofenig; OAuth WG
> Subject: Re: [OAUTH-WG] draft-ietf-oauth-v2-bearer-09: Open Issues &
> Proposed Resolutions
> 
> On 2011-10-17 20:53, Eran Hammer-Lahav wrote:
> > All I agree with is to limit the scope character-set in the v2 spec to the
> subset of ASCII allowed in HTTP header quoted-string, excluding " and \ so no
> escaping is needed, ever.
> 
> You also need to have one character reserved as delimiter for multiple
> scopes inside quoted-string, so is SP out?
> 
> Best regards, Julian
_______________________________________________
OAuth mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/oauth

Reply via email to