Re: [OAUTH-WG] Moving the User Experience Extension draft forward

2010-08-27 Thread David Recordon
Hey Justin, what's a good example of where the instance name parameter would be used? Desktop apps like TweetDeck just ask me to authorize "TweetDesk" and don't separate between my laptop and desktop. Another example would be our Facebook mobile apps but "Facebook for iPhone" has a different client

Re: [OAUTH-WG] Moving the User Experience Extension draft forward

2010-08-27 Thread Eran Hammer-Lahav
+1 on making this a WG item (as well as the device draft). EHL From: oauth-boun...@ietf.org [mailto:oauth-boun...@ietf.org] On Behalf Of David Recordon Sent: Friday, August 27, 2010 1:27 PM To: OAuth WG Cc: Tschofenig, Hannes (NSN - FI/Espoo) Subject: Re: [OAUTH-WG] Moving the User Experience Ex

Re: [OAUTH-WG] OAuth 2.0 Token Upgrade Extension

2010-08-27 Thread Eran Hammer-Lahav
+1 on making this a WG item. EHL From: oauth-boun...@ietf.org [mailto:oauth-boun...@ietf.org] On Behalf Of David Recordon Sent: Friday, August 27, 2010 1:26 PM To: OAuth WG Cc: Tschofenig, Hannes (NSN - FI/Espoo) Subject: Re: [OAUTH-WG] OAuth 2.0 Token Upgrade Extension This draft is now an Int

Re: [OAUTH-WG] Moving the User Experience Extension draft forward

2010-08-27 Thread Justin Richer
Does the group have an opinion on adding the instance information that I proposed before* to this UX extension vs. having it live in its own extension? -- Justin * http://www.ietf.org/mail-archive/web/oauth/current/msg03717.html On Fri, 2010-08-27 at 16:23 -0400, David Recordon wrote: > Given

Re: [OAUTH-WG] Device profile draft

2010-08-27 Thread David Recordon
While it's been a few weeks, I've made these changes and posted the Device profile as an Internet Draft: http://tools.ietf.org/html/draft-recordon-oauth-v2-device-00. We're working on an implementation at Facebook and hope to provide feedback toward the next draft. In the meantime I'd like to requ

Re: [OAUTH-WG] Moving the User Experience Extension draft forward

2010-08-27 Thread David Recordon
And to follow that up, I'd like to request that this draft moves to become a Working Group item. I'm am happy to continue acting as the editor. On Fri, Aug 27, 2010 at 8:23 PM, David Recordon wrote: > Given our implementation experience, an iPad should use "popup" as it's a > full web browser o

Re: [OAUTH-WG] OAuth 2.0 Token Upgrade Extension

2010-08-27 Thread David Recordon
This draft is now an Internet Draft and I'm curious if anyone has any feedback on it? http://tools.ietf.org/html/draft-recordon-oauth-v2-upgrade-00 I'd also like to request that this draft moves to become a Working Group item. I'm am happy to act as the editor unless someone else wishes to do so m

Re: [OAUTH-WG] Moving the User Experience Extension draft forward

2010-08-27 Thread David Recordon
Given our implementation experience, an iPad should use "popup" as it's a full web browser on a reasonably large screen. Android and the iPhone should use "touch". I'd be happy to add clarifying language in the extension but am weary about adding the complexity of the client requesting dimensions.

[OAUTH-WG] Duplication of client identifier in different credentials formats

2010-08-27 Thread Laurens Van Houtven
Hi 2.1. Client Password Credentials First example: POST /token HTTP/1.1 Host: server.example.com Authorization: Basic czZCaGRSa3F0MzpnWDFmQmF0M2JW Content-Type: application/x-www-form-urlencoded grant_type=authorization_code&client_id=s6BhdRkqt3&code=i1WsRn1uB1& redirect_uri=https%3A%2F%2Fclien