Re: [OAUTH-WG] Client cannot specify the token type it needs

2013-01-23 Thread Eve Maler
.@ietf.org 写于 2013-01-21 13:08:39: >>> >>> >>> > This is true. It's possible for the AS to vary it's behavior on >>> > scope name, but it's presumed the AS and RS have an agreement of >>> > what token type is in play.

Re: [OAUTH-WG] Client cannot specify the token type it needs

2013-01-23 Thread Eve Maler
:08:39: > > > > This is true. It's possible for the AS to vary it's behavior on > > scope name, but it's presumed the AS and RS have an agreement of > > what token type is in play. Likely a good extension to the spec. > > > > > From: Pr

Re: [OAUTH-WG] Client cannot specify the token type it needs

2013-01-20 Thread Prabath Siriwardena
hink it is > > meaningful only when the requested type is specified by a RS, > > and client just relay that request to AS. > > > > > > > > From: "zhou.suj...@zte.com.cn" > > > To: Prabath Siriwardena > > > Cc: "oauth@ietf.org WG"

Re: [OAUTH-WG] Client cannot specify the token type it needs

2013-01-20 Thread zhou . sujing
d client just relay that request to AS. > > > > > From: "zhou.suj...@zte.com.cn" > > To: Prabath Siriwardena > > Cc: "oauth@ietf.org WG" ; William Mills > > > > Sent: Sunday, January 20, 2013 9:38 PM > > Subject: Re: Re: Re: [OAUTH-W

Re: [OAUTH-WG] Client cannot specify the token type it needs

2013-01-20 Thread Prabath Siriwardena
t; > To: Prabath Siriwardena > > Cc: "oauth@ietf.org WG" ; William Mills > > > > Sent: Sunday, January 20, 2013 9:38 PM > > Subject: Re: Re: Re: [OAUTH-WG] Client cannot specify the token type it > needs > > > > > > Well, if RS could speci

Re: [OAUTH-WG] Client cannot specify the token type it needs

2013-01-20 Thread zhou . sujing
rom: "zhou.suj...@zte.com.cn" > To: Prabath Siriwardena > Cc: "oauth@ietf.org WG" ; William Mills > > Sent: Sunday, January 20, 2013 9:38 PM > Subject: Re: Re: Re: [OAUTH-WG] Client cannot specify the token type it needs > > > Well, if RS coul

Re: [OAUTH-WG] Client cannot specify the token type it needs

2013-01-20 Thread William Mills
it's presumed the AS and RS have an agreement of > > what token type is in play.  Likely a good extension to the spec. > > > > > From: Prabath Siriwardena > > To: "oauth@ietf.org WG" > > Sent: Sunday, January 20, 2013 7:28 PM > > Subject: [OAUTH-W

Re: [OAUTH-WG] Client cannot specify the token type it needs

2013-01-20 Thread zhou . sujing
at token type is in play. Likely a good extension to the spec. > > > > > From: Prabath Siriwardena > > To: "oauth@ietf.org WG" > > Sent: Sunday, January 20, 2013 7:28 PM > > Subject: [OAUTH-WG] Client cannot specify the token type it needs > > &

Re: [OAUTH-WG] Client cannot specify the token type it needs

2013-01-20 Thread Prabath Siriwardena
t; > what token type is in play. Likely a good extension to the spec. > > > > > From: Prabath Siriwardena > > To: "oauth@ietf.org WG" > > Sent: Sunday, January 20, 2013 7:28 PM > > Subject: [OAUTH-WG] Client cannot specify the token type it needs >

Re: [OAUTH-WG] Client cannot specify the token type it needs

2013-01-20 Thread zhou . sujing
s behavior on > scope name, but it's presumed the AS and RS have an agreement of > what token type is in play. Likely a good extension to the spec. > > From: Prabath Siriwardena > To: "oauth@ietf.org WG" > Sent: Sunday, January 20, 2013 7:28 PM > Subject: [OAUTH-

Re: [OAUTH-WG] Client cannot specify the token type it needs

2013-01-20 Thread William Mills
@ietf.org WG" Sent: Sunday, January 20, 2013 7:28 PM Subject: [OAUTH-WG] Client cannot specify the token type it needs Although token type is extensible according to the OAuth core specification - it is fully governed by the Authorization Server. There can be a case where a single AS supports m

[OAUTH-WG] Client cannot specify the token type it needs

2013-01-20 Thread Prabath Siriwardena
Although token type is extensible according to the OAuth core specification - it is fully governed by the Authorization Server. There can be a case where a single AS supports multiple token types based on client request. But currently we don't have a way the client can specify (or at least sugges