On Tue, Jan 11, 2011 at 12:45 PM, Eran Hammer-Lahav <e...@hueniverse.com> wrote: > The exact same argument can be made that the hybrid flow meets all the use > cases of the web-server flow... which means we can keep the current single > flow specification as is... :-) > > What am I missing? (I'm asking).
The hybrid flow does not work well for applications that consist mainly of server-side code. The URL fragment is not transferred to the web server, so they have to write extra client-side code to send it up to their server. _______________________________________________ OAuth mailing list OAuth@ietf.org https://www.ietf.org/mailman/listinfo/oauth
