Hi all, The authors have finished incorporating the changes discussed at the last meeting and published a new draft:
https://www.ietf.org/archive/id/draft-parecki-oauth-first-party-apps-00.html Highlights include: • Renamed "device_session" to "auth_session" (feel free to continue bikeshedding this during the next meeting) • Added a way for the AS to indicate that the client should bounce out to a browser • Described how to use DPoP in conjunction with this spec • Added example of using a passkey to get an authorization code Here is the full list of issues we addressed in this revision: https://github.com/aaronpk/oauth-first-party-apps/milestone/2?closed=1 I look forward to continuing the discussion at IETF 118! --- Aaron Parecki
_______________________________________________ OAuth mailing list OAuth@ietf.org https://www.ietf.org/mailman/listinfo/oauth