What would be the benefit of using this response type? Are you aware of any OAuth (not OIDC) clients that do this today?
- Aaron On Sat, Dec 8, 2018 at 7:29 AM Brock Allen <brockal...@gmail.com> wrote: > Should the BCP suggest using OIDC's response_type=fragment as the > mechanism for returning the code from the AS? Or simply suggest using the > fragment component of the redirect_uri for the code, without a > response_type parameter (IOW don't allow it to be dynamic)? > > -Brock > > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth >
_______________________________________________ OAuth mailing list OAuth@ietf.org https://www.ietf.org/mailman/listinfo/oauth