It would make more sense to me, too, to use the same protocol flow for oauth/authorize and /authenticate.
On Apr 16, 11:51 pm, Abraham Williams <4bra...@gmail.com> wrote: > It seems like it would make more sense to use the same work flow for both > oauth/authorize and oauth/authenticate. Then the same code could be used in > the callback function and the authenticate method would be more secure.
