Re: [OAUTH-WG] slightly alternative preamble (was: Re: Draft -12 feedback deadline)

2011-03-06 Thread Dick Hardt
-1 Many sites are using OAuth (or something like it) in native apps now. One of the objectives of having a standard is to bring best practices and standardization to how to solve a problem rather than "a million freakin unique snowflakes" where developers have to learn and code each mechanism

[OAUTH-WG] draft-ietf-oauth-v2-13 comments

2011-03-06 Thread Mark Kent
First up, nice work with the latest version ­ it¹s considerably easier to follow than previous version. Based on a simple attempt to implement a compliant authentication server, I have the following requests for clarification: 1. The error response mechanism for the authorization endpoint depends

Re: [OAUTH-WG] slightly alternative preamble (was: Re: Draft -12 feedback deadline)

2011-03-06 Thread Torsten Lodderstedt
+1 Am 02.03.2011 15:05, schrieb Brian Campbell: I propose that the "or native applications" text be dropped from the first paragraph in section 4.2 Implicit Grant [1]. There is clearly some disagreement about what is most appropriate for mobile/native applications and many, including myself, d