Re: [OAUTH-WG] in-app logout?

Chasen Le Hara <chasen@ironmoney.com> Fri, 21 May 2010 05:38 UTC

MIME-Version: 1.0
In-Reply-To: <AANLkTikxD3jraqvG2IFmaSme0f1Q7NGPuQ3llqX3Ds5W@mail.gmail.com>
References: <4BEBDCFB.7090503@lodderstedt.net> <255B9BB34FB7D647A506DC292726F6E11263465727@WSMSG3153V.srv.dir.telstra.com> <AANLkTikxD3jraqvG2IFmaSme0f1Q7NGPuQ3llqX3Ds5W@mail.gmail.com>
Date: Thu, 20 May 2010 21:05:21 -0700
Message-ID: <AANLkTinnZUp5fPB6SEtFGvAT11iGtkBy_zwx1EO6sxSS@mail.gmail.com>
From: Chasen Le Hara <chasen@ironmoney.com>
To: OAuth WG <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="0016363b90f6bf799c048712cc8d"
Subject: Re: [OAUTH-WG] in-app logout?
Precedence: list

On Sun, May 16, 2010 at 11:27 AM, Dick Hardt <dick.hardt@gmail.com> wrote:

> Torsten: enabling a client to revoke a refresh token looks like a useful
> mechanism. I anticipate it will be viewed as a vitamin feature rather than a
> painkiller and will fall by the wayside unless the security conscience rally
> to have it included.
>

I’d like to put in another vote for this mechanism.

I’m about to add a “in-app logout” to an iPhone app that uses OAuth; while I
can delete the token from the device, a standard way for deleting the token
from the web service would be helpful in preventing future uses of the token
(for example, if the device is restored from a backup and the token was
stored in the backup files).
-Chasen

[OAUTH-WG] in-app logout? Torsten Lodderstedt
Re: [OAUTH-WG] in-app logout? Manger, James H
Re: [OAUTH-WG] in-app logout? Dick Hardt
Re: [OAUTH-WG] in-app logout? Manger, James H
Re: [OAUTH-WG] in-app logout? Dick Hardt
Re: [OAUTH-WG] in-app logout? Yaron Goland
Re: [OAUTH-WG] in-app logout? Manger, James H
Re: [OAUTH-WG] in-app logout? Manger, James H
Re: [OAUTH-WG] in-app logout? Chasen Le Hara
Re: [OAUTH-WG] in-app logout? Hubert Le Van Gong
Re: [OAUTH-WG] in-app logout? Allen Tom
Re: [OAUTH-WG] in-app logout? Lukas Rosenstock
Re: [OAUTH-WG] in-app logout? Beau Lebens
Re: [OAUTH-WG] in-app logout? Hubert Le Van Gong
Re: [OAUTH-WG] in-app logout? Torsten Lodderstedt
Re: [OAUTH-WG] in-app logout? Igor Faynberg
Re: [OAUTH-WG] in-app logout? Eran Hammer-Lahav
Re: [OAUTH-WG] in-app logout? Torsten Lodderstedt
Re: [OAUTH-WG] in-app logout? Eran Hammer-Lahav
Re: [OAUTH-WG] in-app logout? Manger, James H
Re: [OAUTH-WG] in-app logout? Justin Richer
[OAUTH-WG] Fwd: Re: in-app logout? Torsten Lodderstedt
Re: [OAUTH-WG] in-app logout? Eran Hammer-Lahav
Re: [OAUTH-WG] Fwd: Re: in-app logout? Justin Richer
Re: [OAUTH-WG] Fwd: Re: in-app logout? George Fletcher