+1 for #3 for me as well
On 11/18/10 10:27 AM, William Mills wrote:
#3. It's clear and well defined. No chance of confusion.
1. Missing type response parameter means bearer token
2. Missing type response parameter means whatever the service default
token type is
3. Servers must include an explicit token type with each response,
where each token spec (bearer, signed, etc.) register their own type
name
4. No token type. Type is determined by other attributes (such as
secret and hash algorithm name).
_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth
_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth
