This was never an actual requirement. Any text in [[ ]] is strictly an
editorial comment, and used by the editor to document comments that are not
part of the specification.
In this case, when extensibility was first discussed, I added these comments
everywhere where extensibility *might* be a
#11: 10.3. The OAuth Extensions Error Registry
Description changed by barryleiba@…:
Old description:
> Pending Consensus:
>
> 10.3. The OAuth Extensions Error Registry
>
> This specification establishes the OAuth extensions error registry.
>
> Additional error codes used together with other prot
#10: 8.4. Defining Additional Error Codes
Description changed by barryleiba@…:
Old description:
> Pending Consensus:
>
> 8.4. Defining Additional Error Codes
>
> In cases where protocol extensions (i.e. access token types, extension
> parameters, or extension grant types) require additional erro
#10: 8.4. Defining Additional Error Codes
Description changed by barryleiba@…:
Old description:
> Pending Consensus:
>
> 8.4. Defining Additional Error Codes
>
> In cases where protocol extensions (i.e. access token types, extension
> parameters, or extension grant types) require additional erro
#9: 5.2, text for non-400 & 401 error conditions
Description changed by barryleiba@…:
Old description:
> Pending Consensus:
> If the authorization server encounters an error condition other than the
> 400 (Bad Request) and 401 (Unauthorized) responses described above (e.g.
> the service is tempo
#8: 4.1.2.1 and 4.2.2.1, text for 4xx or 5xx HTTP status code
Description changed by barryleiba@…:
Old description:
> Pending Consensus:
> The authorization server MAY set the "error" parameter value to a
> numerical HTTP status code from the 4xx or 5xx range, with the exception
> of the 400 (Ba