Re: [OAUTH-WG] Re-creation of Access Token on Single Page Application

2021-03-14 Thread David Waite
> On Mar 14, 2021, at 8:36 PM, Tatsuya Karino wrote: > > On Safari, you have no workaround. > 3rd-party cookie is dead, and all JS-writable data is removed in 7 days there. > > As you stated, option 1 does not work in cross-site scenarios in Safari & > Brave at the moment. Other browsers are

Re: [OAUTH-WG] Re-creation of Access Token on Single Page Application

2021-03-14 Thread Tatsuya Karino
> > On Safari, you have no workaround. > 3rd-party cookie is dead, and all JS-writable data is removed in 7 days > there. As you stated, option 1 does not work in cross-site scenarios in Safari & > Brave at the moment. Other browsers are likely to follow the same pattern > in the future. > Option

[OAUTH-WG] DPoP Interim Meeting

2021-03-14 Thread Rifaat Shekh-Yusef
All, The coming OAuth WG Interim meeting to discuss DPoP is this Monday, March 15 at 12:00pm *EDT*. The following link has links to the slides and the draft, and will be used to capture the notes and attendees: https://codimd.ietf.org/notes-ietf-interim-2021-oauth-01-oauth Please, make sure to ad