Re: [OAUTH-WG] Advertise PKCE support in OAuth 2.0 Discovery (draft-jones-oauth-discovery-00)

2016-02-01 Thread Mike Jones
Congratulations on your deployment! From: William Denniss [mailto:wdenn...@google.com] Sent: Monday, February 1, 2016 12:25 PM To: Mike Jones Cc: John Bradley ; Nat Sakimura ; oauth@ietf.org Subject: Re: [OAUTH-WG] Advertise PKCE support in OAuth 2.0 Discovery (draft-jones-oauth-discovery-00)

Re: [OAUTH-WG] Advertise PKCE support in OAuth 2.0 Discovery (draft-jones-oauth-discovery-00)

2016-02-01 Thread William Denniss
We are now live with this change: https://accounts.google.com/.well-known/openid-configuration I'm glad we all reached a consensus on how this param should work, and what it should be called, and thank you Mike for revising the draft! My ask now is that we don't revisit this decision, unless for

[OAUTH-WG] How can client react to access token not-before errors

2016-02-01 Thread Sergey Beryozkin
Hi Access tokens (particularly JWT-based) may have a not before property set - for example, a token introspection response may report an 'nbf' property. How can a client react to the error related to using the access token too early ? Typically a client would attempt to refresh a token if