Re: [OAUTH-WG] OAuth 2.1 - drop implicit flow?

2020-03-18 Thread Jared Jennings
I agree, but would add that as long as it says "this is being drop", but does not impact "that", then the reader can understand context. "This does not change support for implicit response that OpenID Connect (OIDC) makes use of". my two cents. -Jared Skype:jaredljennings Signal:+1 816.730.9540 W

Re: [OAUTH-WG] OAuth 2.1 - drop implicit flow?

2020-03-18 Thread Justin Richer
OpenID Connect is based on OAuth 2.0, not on OAuth 2.1. Therefore, it would not be affected at all, whether through the hybrid or implicit flows. If OIDC pushes a revision to OAuth 2.1, then it would be bound by the features of OAuth 2.1 and would need to contend with that. But until that happen

Re: [OAUTH-WG] OAuth 2.1 - drop implicit flow?

2020-03-18 Thread Jared Jennings
Perfect, and really good info! but most people, if we need to worry about the audience, are not going to put that together. They just read "OAUTH". It's not a deal breaker, but if the document is going to be easy to read and keep confusion to a minimum... then it would be nice if it addressed conce