just a minor issue
"In addition,
this specification does not provide a mechanism for refresh token
rotation."
The spec provides a mechanisms. It allows for the issuance of a new
refresh token with every request to referesh an access token.
regards,
Torsten.
___
True.
> -Original Message-
> From: oauth-boun...@ietf.org [mailto:oauth-boun...@ietf.org] On Behalf
> Of Torsten Lodderstedt
> Sent: Wednesday, July 20, 2011 2:19 PM
> To: OAuth WG
> Subject: [OAUTH-WG] Issue 17, new token endpoint Client Authentication
> section (3.2