Thank you William for this initiative.
I had similar concerns than Peter on authn vs authz.
Under section 4.1.1 I would suggest to use "oauth2-authorize" instead of
"oauth2-authenticator", to be consistent with the "oauth2-token" pattern and
with the concepts of the oauth2 draft.
The header of
I also support this draft as a way forward for the discussion that I think
captures the essence of both philosophies.
If such basis is agreed what are the major pending issues?
Regards
Laurent-walter
Da: apps-discuss-boun...@ietf.org [mailto:apps-discuss-boun...@ietf.org] Per
conto di Gonzalo
I also would be in favor of keeping both, for the reasons mentioned. Plus xml
is traditionally better than json at handling extensions & namespaces that may
appear throughout future deployments
walter
> -Messaggio originale-
> Da: apps-discuss-boun...@ietf.org [mailto:apps-discuss-
> bo