[OAUTH-WG] OAuth 2.0 Bearer Token Specification Draft -20

Mike Jones <Michael.Jones@microsoft.com> Fri, 08 June 2012 21:08 UTC

Received-SPF: pass (mail61-am1: domain of microsoft.com designates 131.107.125.8 as permitted sender) client-ip=131.107.125.8; envelope-from=Michael.Jones@microsoft.com; helo=TK5EX14HUBC101.redmond.corp.microsoft.com ; icrosoft.com ;
From: Mike Jones <Michael.Jones@microsoft.com>
To: "oauth@ietf.org" <oauth@ietf.org>
Thread-Topic: OAuth 2.0 Bearer Token Specification Draft -20
Thread-Index: Ac1Futblobsvy7tcQq2Ukorv/Ml+RQ==
Date: Fri, 08 Jun 2012 21:08:37 +0000
Message-ID: <4E1F6AAD24975D4BA5B16804296739436652F914@TK5EX14MBXC284.redmond.corp.microsoft.com>
Accept-Language: en-US
Content-Language: en-US
Content-Type: multipart/alternative; boundary="_000_4E1F6AAD24975D4BA5B16804296739436652F914TK5EX14MBXC284r_"
MIME-Version: 1.0
Subject: [OAUTH-WG] OAuth 2.0 Bearer Token Specification Draft -20
Precedence: list

Draft 20 of the OAuth 2.0 Bearer Token Specification has been published.  I believe that this draft addresses all DISCUSS issues and comments raised for this specification in IESG review.  No normative changes were made, other than specifying the use of Cache-Control options when using the URI Query Parameter method.

Changes made were:

  *   Added caveat about using a reserved query parameter name being counter to URI namespace best practices.
  *   Specified use of Cache-Control options when using the URI Query Parameter method.
  *   Changed title to "The OAuth 2.0 Authorization Framework: Bearer Token Usage".
  *   Referenced syntax definitions for the scope, error, error_description, and error_uri parameters in the OAuth 2.0 core spec.
  *   Registered the invalid_request, invalid_token, and insufficient_scope error values in the OAuth Extensions Error Registry.
  *   Acknowledged additional individuals.

The draft is available at:

*        http://tools.ietf.org/html/draft-ietf-oauth-v2-bearer-20
A HTML-formatted version is available at:

*        http://self-issued.info/docs/draft-ietf-oauth-v2-bearer-20.html

                                                                -- Mike

[OAUTH-WG] OAuth 2.0 Bearer Token Specification D… Mike Jones