Hi, Eve Sorry for reply late. I somehow missed the emails from OAUTH list.
"If the client/requesting party is literally acting on behalf of the initial RO, then it would seem to me that this is closer to the discussions of "redelegation" and Twitter Echo and such from the past. UMA's use cases have to do with authorizing delegated access that is performed on behalf of the client itself (the word "autonomous" from OAuth 1.0 springs to mind). Eve" Can you give me the link of discussion in the past you mentioned? The usecase Hardjono rediscribed may not necessarily invloving "redelegation", a more general case would be the Babysitter directly show delegation to the Teacher and walk the child home.
_______________________________________________ OAuth mailing list OAuth@ietf.org https://www.ietf.org/mailman/listinfo/oauth