On 2011-10-05 at 05:07:06, Mike Jones wrote: > Existing practice is that simple ASCII strings like "email" "profile", > "openid", etc. are used as scope elements. Requiring them to be URIs > would break most existing practice.
Constraining syntax to an ascii token OR a URI (relative reference) might work. Anything with a colon can be interpreted as a URI; anything without better use a constrained set of characters. _______________________________________________ OAuth mailing list OAuth@ietf.org https://www.ietf.org/mailman/listinfo/oauth