Re: [OAUTH-WG] OAuth v2-18 comment on "state" parameter

2011-07-18 Thread Eran Hammer-Lahav
> -Original Message- > From: oauth-boun...@ietf.org [mailto:oauth-boun...@ietf.org] On Behalf Of > Eliot Lear > Sent: Sunday, July 17, 2011 2:49 AM > One other point: if the redirection_uri can have fragments and can be > provided, why is state necessary? First, I assume you mean query

[OAUTH-WG] Request to close issues

2011-07-18 Thread Eran Hammer-Lahav
I would like to ask the chairs to close the following issues: #15 section 2 #16 section 3.1.2 #17 section 3.2.1 I have posted a new proposal for #18 section 8.4 for the WG to consider in order to close the issue. EHL ___ OAuth mailing list OAuth@ietf.

[OAUTH-WG] Proposed change to section 8.4. Defining New Authorization Endpoint Response Types

2011-07-18 Thread Eran Hammer-Lahav
I have tried to accommodate both the use cases and concerns raised. The new text allows the registration of composite response types in which the order of the space-delimited values does not matter. However, every combination must be registered in order to avoid developers guessing what an unreg