> Assuming simplification is the main driver, I think it is feasible to > combine Web Callback and Native Application, with no penalty.
How would that work? The Web Callback flow assumes the presence of a client_secret, while the Native Application does not have a secret. _______________________________________________ OAuth mailing list OAuth@ietf.org https://www.ietf.org/mailman/listinfo/oauth
