Re: [OAUTH-WG] application/x-www-form-urlencoded vs JSON (Proposal)

Dick Hardt <dick.hardt@gmail.com> Sat, 01 May 2010 01:49 UTC

Return-Path: <dick.hardt@gmail.com>
X-Original-To: oauth@core3.amsl.com
Delivered-To: oauth@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 300473A68C3 for <oauth@core3.amsl.com>; Fri, 30 Apr 2010 18:49:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.439
X-Spam-Level:
X-Spam-Status: No, score=-2.439 tagged_above=-999 required=5 tests=[AWL=0.160, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id s8Z9wVCPI9+4 for <oauth@core3.amsl.com>; Fri, 30 Apr 2010 18:49:02 -0700 (PDT)
Received: from mail-px0-f172.google.com (mail-px0-f172.google.com [209.85.212.172]) by core3.amsl.com (Postfix) with ESMTP id 6D3FA3A6851 for <oauth@ietf.org>; Fri, 30 Apr 2010 18:49:02 -0700 (PDT)
Received: by pxi19 with SMTP id 19so479729pxi.31 for <oauth@ietf.org>; Fri, 30 Apr 2010 18:48:45 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:subject:mime-version :content-type:from:in-reply-to:date:cc:content-transfer-encoding :message-id:references:to:x-mailer; bh=rUu7P1AvwsvpH9NsxWF3IIiDsv3GxzO4EIIBXzqIt+g=; b=i+x/d2cafszo2xcIuGgYXduFrBVaOzsvA2Z1VksrFLu2hRIAlXDvA6Z7YrTTYDT23k OE6cOov8AbQhoHeCvR88SJDB6uK6x+t3ncf8DigNg2Aa3lFMjc08jP3HyBInZEF6vGXx LWYVnIyPPMF00wCSa+HqZ2Us/o7S3cSpmRllw=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=subject:mime-version:content-type:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to:x-mailer; b=PKOyGgII97moA9A1Og65sdCm1Pljx+xJ9y0kybUIQnGufNQSMp5WD7+dy8HDyQZvqP fWgORFngL+9Q/2/bGx+cC83xtrSdWIho9fr6lfr7UA4X7rJjnY+YHIKO6tnqYJ4BgJ3F B8YNpMyBgQ9Stwr7Vj2N/h2YQ+qvnnoyKYjNY=
Received: by 10.114.215.12 with SMTP id n12mr2020713wag.68.1272678525823; Fri, 30 Apr 2010 18:48:45 -0700 (PDT)
Received: from [10.0.1.8] (c-67-180-195-167.hsd1.ca.comcast.net [67.180.195.167]) by mx.google.com with ESMTPS id v13sm11531500wav.2.2010.04.30.18.48.44 (version=TLSv1/SSLv3 cipher=RC4-MD5); Fri, 30 Apr 2010 18:48:44 -0700 (PDT)
Mime-Version: 1.0 (Apple Message framework v1078)
Content-Type: text/plain; charset="us-ascii"
From: Dick Hardt <dick.hardt@gmail.com>
In-Reply-To: <7C01E631FF4B654FA1E783F1C0265F8C4A402461@TK5EX14MBXC117.redmond.corp.microsoft.com>
Date: Fri, 30 Apr 2010 18:48:43 -0700
Content-Transfer-Encoding: quoted-printable
Message-Id: <DE3327C1-F8B7-43E0-8A49-EF3EA60B1E5B@gmail.com>
References: <9890332F-E759-4E63-96FE-DB3071194D84@gmail.com> <20100419134825.134951nuzvi35hk4@webmail.df.eu> <90C41DD21FB7C64BB94121FBBC2E723438E5C7F45E@P3PW5EX1MB01.EX1.SECURESERVER.NET> <4BD2A172.2070401@lodderstedt.net> <4BD8869A.2080403@lodderstedt.net> <s2zc334d54e1004281425x5e714eebwcd5a91af593a62ac@mail.gmail.com> <v2j68fba5c51004282044o3a5f96cfucb1157d3884d8cd2@mail.gmail.com> <4BD9E1E3.7060107@lodderstedt.net> <7C01E631FF4B654FA1E783F1C0265F8C4A3EF0B0@TK5EX14MBXC115.redmond.corp.microsoft.com> <z2yf5bedd151004291440g17693f8du9e19a649bef925e4@mail.gmail.com> <w2odaf5b9571004291509x8895a73k384a4b4ddb12b794@mail.gmail.com> <20100430105935.20255m8kdythy6sc@webmail.df.eu> <7C01E631FF4B654FA1E783F1C0265F8C4A402461@TK5EX14MBXC117.redmond.corp.microsoft.com>
To: Yaron Goland <yarong@microsoft.com>
X-Mailer: Apple Mail (2.1078)
Cc: "oauth@ietf.org" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] application/x-www-form-urlencoded vs JSON (Proposal)
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 01 May 2010 01:49:03 -0000

On 2010-04-30, at 9:02 AM, Yaron Goland wrote:

> I actually have a preference for application/x-www-form-urlencoded but it's not overwhelming, the key thing I believe we need to do is have exactly one request/response format. In other words, I don't believe we should use one format for requests and another for responses. Just pick one for both.

Using JSON for both seems weird relative to existing implementations. Look at the Facebook Open Graph API. Given FB's presence, a pattern that will be widely adopted and understood. Parameters are on the query line, and results are in JSON. If we changed the response from the AS to JSON, it would seem natural to a FB developer. Now they have to decode responses to the AS as being  application/x-www-form-urlencoded, and the other are JSON.

-- Dick