[OAUTH-WG] Weekly github digest (OAuth Activity Summary)

2024-03-24 Thread Repository Activity Summary Bot
Events without label "editorial" Issues -- * oauth-wg/oauth-browser-based-apps (+2/-0/💬0) 2 issues created: - Properly render sublists (by philippederyck) https://github.com/oauth-wg/oauth-browser-based-apps/issues/43 - Consistently use *applications* or *apps* (by philippederyck)

Re: [OAUTH-WG] OAuth for Browser-Based Apps

2024-03-24 Thread Philippe De Ryck
Hi Justin, Thank you for your detailed review. > §9+ this draft should add privacy considerations, particularly for BFF > pattern's proxy architecture.e I wanted to ask for a bit more context on this comment. I understand that having a proxy as a separate entity would expose all requests/resp

[OAUTH-WG] Transaction tokens draft-ietf-oauth-transaction-tokens-01 - my comments

2024-03-24 Thread yaronf.i...@gmail.com
I had a long flight and I’m still not there yet… But had time to review this draft. Thanks authors, this is important and useful work. It’s also quite early, so I have a long list of comments below.Intro: for "workloads", I suggest to add a reference to the WinSE Architecture draft.2.1: "the execut