Re: [OAUTH-WG] Meeting Minutes

2015-07-25 Thread Justin Richer
> Consensus: For use of existing params defined in OAuth, while allowing some > to be optional when not needed. That was not the consensus as I understood it in the room. The consensus was the first portion, as originally noted. The second portion was Mike’s requested amendment, and it (and oth

Re: [OAUTH-WG] Meeting Minutes

2015-07-25 Thread Brian Campbell
My sense of the consensus in the room is as Justin describes it. On Sat, Jul 25, 2015 at 9:14 AM, Justin Richer wrote: > > Consensus: For use of existing params defined in OAuth, while allowing > some to be optional when not needed. > > That was not the consensus as I understood it in the room.

Re: [OAUTH-WG] Authentication Method Reference Values Specification

2015-07-25 Thread Brian Campbell
There's a method of authentication that is gaining in popularity which I'd propose adding a method for. It is typically used as a second factor where after a primary auth, like username and password, a push notification is sent to the user's phone and they acknowledge it from the device. We have th