On Wed, Jul 7, 2010 at 4:51 PM, Chuck Mortimore
<cmortim...@salesforce.com> wrote:
> This thread forced a great deal on internal discussion today, and we
> actually do have some more immediate use-cases where we'll require
> client_id with the assertion flow
>
> I support leaving it as optional

Can you describe the additional use cases?

And do they require refresh tokens as well?

I'm really worried about jamming multiple use cases into a single
profile, and then being surprised when:
a) that profile is suboptimal for all of the use cases
b) developers are hugely confused by it

Cheers,
Brian
_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth

Reply via email to