[OAUTH-WG] OAuth server with a static web frontend?

2016-04-02 Thread Josh Mandel
Hi all, I'm exploring the idea of an OAuth server comprising two separate components: * Static *frontend* web app that handles all UI functionality * Headless *backend* that never returns HTML These two components would communicate via some well-defined internal protocol. For example, the fron

Re: [OAUTH-WG] OAuth 2.0 for Native Apps: open source client libraries

2016-04-02 Thread John Bradley
The current iOS version works just fine with apps written in Swift. I don’t know that there is a compelling reason to support two code bases on the same platform as long as the SDK supports all the development tools. Other than as an example, do you have a reason for needing it in Swift? At the

Re: [OAUTH-WG] Fwd: New Version Notification for draft-campbell-oauth-resource-indicators-01.txt

2016-04-02 Thread Torsten Lodderstedt
Hi Brian, did you intentionally omit scope values in your example requests? I would like to know what you envision to be the relationshop between scope and resource. As you draft says, we today use scope values to indicate to the AS, which ressource servers the clients wants to access. I think