Hi,

I just found this sentence in the latest draft.

Does it mean "an application consisting of server-side and client-side 
component (eg. foursquare iPhone app) MUST have separate client_id for each 
component" ?
Or can I image something like Facebook is doing right now? (register each 
component for a single client_id separately)

==
A client application consisting of multiple components, each with its
own client type (e.g. a distributed client with both a confidential
server-based component and a public browser-based component), MUST
register each component separately as a different client to ensure
proper handling by the authorization server.  The authorization
server MAY provider tools to manage such complex clients through a
single administration interface.
==

--
nov <n...@matake.jp>
_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth

Reply via email to