Hi, I just found this sentence in the latest draft.
Does it mean "an application consisting of server-side and client-side component (eg. foursquare iPhone app) MUST have separate client_id for each component" ? Or can I image something like Facebook is doing right now? (register each component for a single client_id separately) == A client application consisting of multiple components, each with its own client type (e.g. a distributed client with both a confidential server-based component and a public browser-based component), MUST register each component separately as a different client to ensure proper handling by the authorization server. The authorization server MAY provider tools to manage such complex clients through a single administration interface. == -- nov <n...@matake.jp> _______________________________________________ OAuth mailing list OAuth@ietf.org https://www.ietf.org/mailman/listinfo/oauth