On Wed, Jan 26, 2011 at 2:53 PM, Eran Hammer-Lahav <e...@hueniverse.com> wrote: > Can you share what the actual request looks on the wire? How are you passing > the Kerberos authentication in the request? What do you set the grant type to?
Most of this pre-dates grant type and the OAuth2 brand. =) >From memory, the kerberos to access token swap looks like this: GET /some/token/endpoint?s=<scope>&g=<desired-ticket-attributes> Authorization: Negotiate <stock-negotiate-kerberos-header-here> And the response includes a ticket that is basically an OAuth2 access token, for the specified scope, with some additional metadata requested by the "g" parameter. Cheers, Brian _______________________________________________ OAuth mailing list OAuth@ietf.org https://www.ietf.org/mailman/listinfo/oauth
