Re: [OAUTH-WG] question about the b64token syntax in draft-ietf-oauth-v2-bearer

Paul Madsen <paul.madsen@gmail.com> Sun, 11 March 2012 11:19 UTC

Return-Path: <paul.madsen@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 28A7421F8549 for <oauth@ietfa.amsl.com>; Sun, 11 Mar 2012 04:19:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.306
X-Spam-Level:
X-Spam-Status: No, score=-2.306 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, MISSING_HEADERS=1.292, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M1Rlmc9AVPAq for <oauth@ietfa.amsl.com>; Sun, 11 Mar 2012 04:19:09 -0700 (PDT)
Received: from mail-iy0-f172.google.com (mail-iy0-f172.google.com [209.85.210.172]) by ietfa.amsl.com (Postfix) with ESMTP id 8376421F84D6 for <oauth@ietf.org>; Sun, 11 Mar 2012 04:19:00 -0700 (PDT)
Received: by iazz13 with SMTP id z13so5656331iaz.31 for <oauth@ietf.org>; Sun, 11 Mar 2012 04:19:00 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:cc:subject:references :in-reply-to:content-type; bh=ZKTpcBDYkEwlgfkjABJPvpU/sXCDLe6H+HMTU/WxdBk=; b=DNYaftAF+IogyEbBPPSeJjoX+BUyMhLe+aCPO95s+EvwJZU3bVZZSAZFo8Fgd0LZHm HCK9E02fcWCYa8PrSiGZh9utYi8HX8LUAtLgZJIgBC9+JvVUxje5dn1EcLFXaxsdrcZ6 Aw2YdfkHxIpoSUhAvz4OAQtU6OQSKEvlX7IeVDzLoXtndo7vfSlUUtnv6YikQgiPQE24 qhzuA4s6HG5LJrLdE5p6IwoMTzc2HJtnuWLBoKpiKYcor2EZvjeUsbomjcybDmXcgni8 8lHO2ZUgBlJEzRy1Blil9zoZTwJgmaCgZVVbtpDGxsPnWuXOJeodCr67oOyWV6rEIwA1 CVRw==
Received: by 10.50.219.163 with SMTP id pp3mr13448754igc.1.1331464740228; Sun, 11 Mar 2012 04:19:00 -0700 (PDT)
Received: from pmadsen-mbp.local (bas1-kanata16-1088758938.dsl.bell.ca. [64.229.36.154]) by mx.google.com with ESMTPS id ke7sm3099572igc.10.2012.03.11.04.18.57 (version=SSLv3 cipher=OTHER); Sun, 11 Mar 2012 04:18:58 -0700 (PDT)
Message-ID: <4F5C8A20.4050005@gmail.com>
Date: Sun, 11 Mar 2012 07:18:56 -0400
From: Paul Madsen <paul.madsen@gmail.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:10.0.2) Gecko/20120216 Thunderbird/10.0.2
MIME-Version: 1.0
References: <14D58DEC-B867-47C2-A5E6-1C67F7595F94@team.telstra.com>
In-Reply-To: <14D58DEC-B867-47C2-A5E6-1C67F7595F94@team.telstra.com>
Content-Type: multipart/alternative; boundary="------------020704060304060201040304"
Cc: "oauth@ietf.org" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] question about the b64token syntax in draft-ietf-oauth-v2-bearer
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 11 Mar 2012 11:19:10 -0000

+1

On 3/11/12 6:05 AM, Manger, James H wrote:
> +1
>
> --
> James Manger
>
> ----- Reply message -----From: "Mike Jones"<Michael.Jones@microsoft.com>  Date: Sun, Mar 11, 2012 4:50 am Subject: [OAUTH-WG] question about the b64token syntax in draft-ietf-oauth-v2-bearer To: "Paul Madsen"<paul.madsen@gmail.com>, "Brian Campbell"<bcampbell@pingidentity.com>  Cc: "oauth"<oauth@ietf.org>
>
> I plan to make the change to the example access token value tomF_9.B5f-4.1JqM before Monday’s submission deadline, per the requests for b64token syntax clarification. I’m also considering adding an access token response example, pre the requests in this thread. I would propose adding the following new text for this in a new Section 4 (before the current Security Considerations). This is largely parallel to what is done in Section 5.1 of the MAC spec.
>
> 4. Example Access Token Response
>
> Typically a bearer token is returned to the client as part of an OAuth 2.0 [I-D.ietf-oauth-v2] access token response. An example of such as response is:
>
> HTTP/1.1 200 OK
>
> Content-Type: application/json;charset=UTF-8
>
> Cache-Control: no-store
>
> Pragma: no-cache
>
> {
>
> "access_token":"mF_9.B5f-4.1JqM",
>
> "token_type":"Bearer",
>
> "expires_in":3600,
>
> "refresh_token":"tGzv3JOkF0XG5Qx2TlKWIA"
>
> }
>
> Please send either +1s or objections to this text by mid-day Monday. Unless I receive several +1s, to be conservative at this point, I will not be including it in Monday’s draft.
>
> -- Mike
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth