On 2/10/2015 7:06 AM, Brian Campbell wrote:


On Mon, Feb 9, 2015 at 3:59 PM, John Bradley <ve7...@ve7jtb.com
<mailto:ve7...@ve7jtb.com>> wrote:

    Connect has a response_mode that allows the response to be form
    encoded rather than fragment.
    I read RFC 5849 as only allowing code to be query encoded.   The
    response_mode was intended for the new response types we defined in
    http://openid.net/specs/oauth-v2-multiple-response-types-1_0.html


Actually response_mode is defined in that spec itself in section 2.1
<http://openid.net/specs/oauth-v2-multiple-response-types-1_0.html#ResponseModes>.


Yeah, and it looks like you can use it for anything. It only defines default modes for various response types (code, token, etc.)

--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com

_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth

Reply via email to