Yeah, maybe it could be clarified a bit. Thanks. It made sense when I
first read the text. However, when I went to implement it, I started
reading into "previously approved" (maybe too much) and I think maybe
that wording is potentially ambiguous.
On Tue, Mar 29, 2011 at 5:16 PM, Eran Hammer-Lahav
> -Original Message-
> From: oauth-boun...@ietf.org [mailto:oauth-boun...@ietf.org] On Behalf
> Of Brian Campbell
> Sent: Tuesday, March 29, 2011 3:32 PM
> To: oauth
> Subject: [OAUTH-WG] Question on scope when refreshing an access token
>
> I'm a bit confu
I'm a bit confused by the text at the end of the definition of the
scope parameter in section 6 on Refreshing an Access Token[1]. It
says,
"... The requested scope MUST be equal or lesser
than the scope originally granted by the resource owner, and if
omitted is treated
