Re: [OAUTH-WG] Multiple access tokens

2012-03-08 Thread Ross Boucher
f > access that would not potentially kill both tokens and always kill the > refresh token. > > > > > > > - Original Message - > From: Ross Boucher > To: OAuth WG > Cc: > Sent: Wednesday, March 7, 2012 6:14 PM > Subject: [OAUTH-WG] Multiple a

[OAUTH-WG] Multiple access tokens

2012-03-07 Thread Ross Boucher
The spec doesn't seem to have any recommendations on this point, but should an OAuth v2 API always return the same access token if the same client makes multiple requests? Is there any benefit to not generating a new access token for each request? Similarly, if you do generate new access tokens