[OAUTH-WG] Re: PKCE RFC 7636 and registered URLs

2024-10-01 Thread David Waite
> On Oct 1, 2024, at 3:44 AM, axel.nenn...@telekom.de wrote: > > Hi, > > is this sentence in the introduction of RFC 7636 > still true? > “The Redirection Endpoint URI in this case typically uses a custom URI >scheme.” I would say this is s

[OAUTH-WG] Re: PKCE RFC 7636 and registered URLs

2024-10-01 Thread Thomas Broyer
Fwiw, RFC 8252 (https://datatracker.ietf.org/doc/html/rfc8252) also talks about “claimed "https" scheme URIs”. And OAuth 2.1 ( https://datatracker.ietf.org/doc/html/draft-ietf-oauth-v2-1-11) will consolidate all those RFCs into one. On Tue, Oct 1, 2024 at 11:45 AM wrote: > Hi, > > > > is this se