Re: [OAUTH-WG] Questions on urn:ietf:wg:oauth:2.0:oob

2017-10-10 Thread Jim Willeke
Thanks for all the feedback. -- -jim Jim Willeke On Tue, Oct 10, 2017 at 11:02 AM, John Bradley wrote: > urn:ietf:wg:oauth:2.0:oob is a google thing that is not part of the OAuth > 2 specification. > > I think it was mostly a windows thing. > > It is not a real redirect URI it is used as a fla

Re: [OAUTH-WG] Questions on urn:ietf:wg:oauth:2.0:oob

2017-10-10 Thread John Bradley
urn:ietf:wg:oauth:2.0:oob is a google thing that is not part of the OAuth 2 specification. I think it was mostly a windows thing. It is not a real redirect URI it is used as a flag to the authorization server to have the result returned “Out Of Band” and the user cut and paste the token. On w

Re: [OAUTH-WG] Questions on urn:ietf:wg:oauth:2.0:oob

2017-10-10 Thread Thomas Broyer
To my knowledge, it's been replaced with RFC 8252. See https://developers.google.com/identity/protocols/OAuth2InstalledApp (notice the deprecation notices in options 3 and 4 in the "create authorization credentials" section; you can find the "oob" URN later in the doc, associated with the same opt

[OAUTH-WG] Questions on urn:ietf:wg:oauth:2.0:oob

2017-10-10 Thread Jim Willeke
Wondering if you could help with Questions on urn:ietf:wg:oauth:2.0:oob as it appears to be an almost common usage, but no IETF documentation or registration that we can find on the defined usage. This has come up on several occasions. - https://stackoverflow.com/q/46643795/88122 - http://l