[OAUTH-WG] Issue: state in web server flow
Dick Hardt <dick.hardt@gmail.com> Mon, 19 April 2010 04:20 UTC
Return-Path: <dick.hardt@gmail.com>
X-Original-To: oauth@core3.amsl.com
Delivered-To: oauth@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 77EEE28C106 for <oauth@core3.amsl.com>; Sun, 18 Apr 2010 21:20:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.261
X-Spam-Level:
X-Spam-Status: No, score=-2.261 tagged_above=-999 required=5 tests=[AWL=0.338, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RCLwfGfgd6oh for <oauth@core3.amsl.com>; Sun, 18 Apr 2010 21:20:25 -0700 (PDT)
Received: from mail-yw0-f200.google.com (mail-yw0-f200.google.com [209.85.211.200]) by core3.amsl.com (Postfix) with ESMTP id 2D2DD28C103 for <oauth@ietf.org>; Sun, 18 Apr 2010 21:20:25 -0700 (PDT)
Received: by ywh38 with SMTP id 38so2403355ywh.29 for <oauth@ietf.org>; Sun, 18 Apr 2010 21:20:12 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:from:content-type :content-transfer-encoding:subject:date:message-id:to:mime-version :x-mailer; bh=luwJCfcWmuAMWy4Hi+Cnd2wlNu6po5sUX190T/LZxNg=; b=xnQTT3244YDkHzX33eziY8aiM2kZfxgsdtxsAvFXkOD4ekilT2xOn7zJux0wb6JPbq fD59q8gNUqoYG/Io9XnTO+YOi2rg6zzn4B++SvWGKGeberdvn4a5YOQUeaOTClIBww2q vdgZHJXN9lz9aDYsvlsugbW9bahEhJbCJ0XAk=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=from:content-type:content-transfer-encoding:subject:date:message-id :to:mime-version:x-mailer; b=YKdE/mzZBpd7eC9ESwlD5sNu9Tgtx2YXUJpkMS04T5E+HnJYIADNP6doIwkOX1qsA6 eVxrMRvDSY5Nmt/ZCEUPEJAANems3ld93LF+MpvBAnUYHR2ztgH6sviwVamI1c/st5SP rSrJhW2suTFc4FNg+kW2l2HR73Nto3ejHShSg=
Received: by 10.150.179.1 with SMTP id b1mr5581859ybf.78.1271650812706; Sun, 18 Apr 2010 21:20:12 -0700 (PDT)
Received: from [10.0.1.8] (c-67-180-195-167.hsd1.ca.comcast.net [67.180.195.167]) by mx.google.com with ESMTPS id 9sm1474816ywe.22.2010.04.18.21.20.11 (version=TLSv1/SSLv3 cipher=RC4-MD5); Sun, 18 Apr 2010 21:20:12 -0700 (PDT)
From: Dick Hardt <dick.hardt@gmail.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Date: Sun, 18 Apr 2010 21:20:09 -0700
Message-Id: <1E39CE38-763E-4E3D-96D4-DC757BD53B9D@gmail.com>
To: OAuth WG <oauth@ietf.org>
Mime-Version: 1.0 (Apple Message framework v1078)
X-Mailer: Apple Mail (2.1078)
Subject: [OAUTH-WG] Issue: state in web server flow
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 19 Apr 2010 04:20:27 -0000
Why was the state parameter removed from the web server flow? Some AS may require the entire redirect URI to be registered, so the state parameter allows a client to maintain state across calls.
- [OAUTH-WG] Issue: state in web server flow Dick Hardt
- Re: [OAUTH-WG] Issue: state in web server flow Eran Hammer-Lahav
- Re: [OAUTH-WG] Issue: state in web server flow Dick Hardt
- Re: [OAUTH-WG] Issue: state in web server flow Evan Gilbert
- Re: [OAUTH-WG] Issue: state in web server flow Marius Scurtescu
- Re: [OAUTH-WG] Issue: state in web server flow Eran Hammer-Lahav
- Re: [OAUTH-WG] Issue: state in web server flow Marius Scurtescu
- Re: [OAUTH-WG] Issue: state in web server flow Eran Hammer-Lahav
- Re: [OAUTH-WG] Issue: state in web server flow Marius Scurtescu