What would be the benefit of using this response type? Are you aware of any
OAuth (not OIDC) clients that do this today?

- Aaron


On Sat, Dec 8, 2018 at 7:29 AM Brock Allen <brockal...@gmail.com> wrote:

> Should the BCP suggest using OIDC's response_type=fragment as the
> mechanism for returning the code from the AS? Or simply suggest using the
> fragment component of the redirect_uri for the code, without a
> response_type parameter (IOW don't allow it to be dynamic)?
>
> -Brock
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>
_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth

Reply via email to