Re: [OAUTH-WG] Autonomous clients and resource owners (editorial)

2010-05-10 Thread Foiles, Doug
Thanks for the clarity Eran and I understand. -Original Message- From: Eran Hammer-Lahav [mailto:e...@hueniverse.com] Sent: Sunday, May 09, 2010 1:57 PM To: Foiles, Doug; OAuth WG Subject: RE: [OAUTH-WG] Autonomous clients and resource owners (editorial) > -Original Mess

Re: [OAUTH-WG] Autonomous clients and resource owners (editorial)

2010-05-09 Thread Foiles, Doug
onger than recommended authorization grant lifetimes ... which ultimately should be avoided. Is this the point? Thanks. Doug -Original Message- From: Eran Hammer-Lahav [mailto:e...@hueniverse.com] Sent: Sunday, May 09, 2010 10:26 AM To: Foiles, Doug; OAuth WG Subject: RE: [OAU

Re: [OAUTH-WG] OAuth 1 Bridge Flow

2010-05-05 Thread Foiles, Doug
I would expect our OAuth 1.0 services to have support for OAuth 1.0 and 2.0 for some period. I don't think we could expect all our clients to move to OAuth 2.0 at once. This is an interesting idea that allows clients to be able to cut over to OAuth 2.0 without users having to re-authenticate/a

Re: [OAUTH-WG] Autonomous clients and resource owners (editorial)

2010-05-02 Thread Foiles, Doug
oun...@ietf.org] On Behalf Of Chuck Mortimore Sent: Tuesday, April 27, 2010 9:06 AM To: Torsten Lodderstedt; Brian Eaton Cc: Foiles, Doug; OAuth WG Subject: Re: [OAUTH-WG] Autonomous clients and resource owners (editorial) Same here - we don't intend to issue

Re: [OAUTH-WG] Autonomous clients and resource owners (editorial)

2010-04-25 Thread Foiles, Doug
I have a bit of confusion on the Autonomous Client Flows … and specifically related to Eve’s comment below that suggests to me that the autonomous client is NOT ALWAYS the resource owner. Can the Autonomous Client Flows support clients that ARE NOT the actual resource owner? For example for