Re: [OAUTH-WG] I-D Action: draft-ietf-oauth-revocation-00.txt

2012-05-29 Thread Michiel de Jong
Hi Torsten, No, it should indeed work fine with CORS. CORS is supported by IE8+, FF, Chrome, Safari and Opera12+ (with limited error handling and limited verb support in IE8 and IE9, but with POST you should be safe afaik). Note that if you want to support this in combination with implicit grant

Re: [OAUTH-WG] Review of draft-ietf-oauth-assertions-03

2012-05-29 Thread Chuck Mortimore
Just catching up here - thanks for the comments Hannes. Did you merge these in by yourself? -cmort On May 24, 2012, at 11:39 AM, Hannes Tschofenig wrote: > Hi Chuck, Mike, Brian, and Yaron, > > I reviewed the document as part of my shepherding role and I believe there is > still room for im