[OAUTH-WG] Re: Possibly incorrect IANA registry contents for Error Registry

Warren Parad <wparad@rhosys.ch> Sun, 20 September 2026 16:59 UTC

Received: from mail-vs2-x0c.google.com (mail-vs2-x0c.google.com [IPv6:2a00:1450:4864:3a::c]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by mx.ietf.org (Postfix) with ESMTPS id 202AA42 for <oauth@ietf.org>; Sun, 20 Sep 2026 16:59:07 +0000 (UTC)
Authentication-Results: mx.ietf.org; dkim=pass header.d=rhosys.ch header.s=google2024 header.b=BvnroImo; arc=pass ("google.com:s=arc-20260327:i=1"); dmarc=pass (policy=reject) header.from=rhosys.ch; spf=pass (mx.ietf.org: domain of wparad@rhosys.ch designates 2a00:1450:4864:3a::c as permitted sender) smtp.mailfrom=wparad@rhosys.ch
Received: by mail-vs2-x0c.google.com with SMTP id ada2fe7eead31-785692e59a4so1271014137.3 for <oauth@ietf.org>; Sun, 20 Sep 2026 09:59:07 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1789923540; cv=none; d=google.com; s=arc-20260327; b=VohjtiBwXOI43deO0YUi+9czSOUPgnzyqBegLkS4QzlNgY5JE6tn9ILXEC/ashTk9y BKXR8ysPqY9N4u7CkBTGDzn7zCrCM2VXfVoxrF0kmUM3e7g4WlsHkd7D3pNAvtvKHJQs bbIvtjQNqqv/lpQfL6jDgt9YxPRIYtD1z+t950O0mCYLlonTDL8qV0TSZqdyRYtXgzU+ TLyJT57LEu+qgul3brcESl+OVTiprD0duEPhOte7NUkvnKWOajS14yXgJRdqHBfAPs43 8UEWE1rgoNBCMMqVcu9A4S0rsoQRGvQiMQCVQ8LigX5zGqe33qe71AMAOWWH7haLh0yB AlMw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=NIH8Rgn/IPTMgOCmZkRMnPbakX+ammo4gSYppqQKA9w=; fh=LKgB0ztjYRCpIlZxXrQqKRdUrIw57i5rdiBAsIZ0Q70=; b=Y9j43n2jKNoO+VvfyZzn5Ne9NuRzSCi4ouOpIgJaNBmt0JRYtwD8VCSllz+cUMtp79 8HFhKsTL3mX6QPmf0/374DJ6YP90A+WDjWPmwn+tbTfmxXYO/w2UV6UwA7iJ9r08UMrS 8qAhO3juI/7bTrZjd2yM80KW9B62rlDXMVnKkyik9/xOh3JQQUdmUb80nBpG/QHikysr HNxEBJzZgr3jf0QIBsLin3S1TV0J0ZnVsvQxDnOMDyKFg3t84ekCLIgPAPNr4BxQ1jm2 r9XXXPqCO9edUC7QSLX/xT0qfm1EMSVGYmoWrTyDu/nYhc0/MvT2xeVLe8HVM4JEc8Zg IQWA==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rhosys.ch; s=google2024; t=1789923540; x=1790528340; darn=ietf.org; h=content-type:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:from:to:cc:subject:date:message-id:reply-to :content-type; bh=NIH8Rgn/IPTMgOCmZkRMnPbakX+ammo4gSYppqQKA9w=; b=BvnroImoUUHqY28kPDGxVcCjirOFQI5cBkopRD457pMHEHreEMo5Yvc3hhNn0dpP9M +Apa8rJXbKwiOZ/coRC0ygDHIMdPUECrUnhIkKbEPi2Wf4VItEG7m6Lv1Gm/bBD9/1kI cwGPBsIGhmS3wytm0O9k1L30/ZE6fXp0ls1xvyJkCMe9zV5WhOzomIQi0q4MnfZTdfUi VQcNqdjFYBK6wydrO4qaabv7ziBk4A5+/rUBBzFU8pVxFpkCL8SspMG4OHdHeM9G9Ti9 a+p9fH2nl4hcwyHda4cn8uSxcuoVQBpFz6vb1k+9xM2wNEnUct64B2SMRPNBj+/yeEwF B8HA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1789923540; x=1790528340; h=content-type:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:x-gm-gg:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to:content-type; bh=NIH8Rgn/IPTMgOCmZkRMnPbakX+ammo4gSYppqQKA9w=; b=fpE+Bejwl0n//7/mYCALmm14wKHxUKnTcW5mpnJ2JqtzPgADzJM7okVS++6Bq0vvk/ Zj6X7zr4LLE9Zmnxfqywh8u8+iDn2puiN3N8wFuY35X9peRaFGNaXPGEG+LvV7Az7an3 lSe6Xb0kkwCr9fV7vl7+9/j3p3mapIJc2Cjqi1AI/6hCL1F0G7PgCxUl7jFKdEcyJlkT Nv+oR6ix5NT3Y9Pw+O2+ZTPGyVY08OmIrq2kJ3FtCh6nmDnyyocXmTgrr6RK90Q0Ntxd jhS+IANHuHc7L3M3NqznmfndbnVURQrWZ3UHwbGMSM+Ddatqfr+86KTSlAsum/bsa8Kz 64FA==
X-Gm-Message-State: AFuF++l+Gsy91FQskVRMjgt+FVoh4o74wWe+Ja605g8xc0SJDrGQ++By VFhUWtqHzCtcWkxpNfSkLKt87jX1Tn6bBukTbqlQmXnx5AVO+dUYvnhREO+KsZV/91TCM8CiyPL gGy+MVvd1yiSvOXTxWP8k+wy8oHrlGEWQFgSk/2xVmiDohphl7mEO8A==
X-Gm-Gg: AYBFou3p7of5MAUtqDACyimRA5oe/+e6mkmxX+QXmiHi8MsAaKjPT32TKDf2LNZH680 MyObqCrR6Wv7B2/CJ95QJfkrGGn1yjhnqmkZfSbbzgCgvILMrelhUYxiO7h4TO/9l7jR5SEL7Ky LMWJ8UyOUnpoFzZkzfVnxpcJh//ASKTL49vjXuNks7jOQWsljIGJOopso9ee9lhYU2FO2pY+XcO HdyN6841C5D0bjfkEa9l2fFz4LQqyFCEBew6mtUjM3PoIGjN6nHqlP7uRa/ivoeQcy9x5DhvVUL RFLeANWE2I7DpVyH5NWICxfivsqcL1Y6I8gKmXfO4vEYM7GjbpjhBkYeYEr4y7ADfmz0CbvQd74 hd2icHWAtYlaVfX23jojfSQXrFm8B6rFhd68mYTpxSCrA45Fv3l9YbZKchHtrqMavgPflT4+Ddd hPR44re+OeBEpogV5sFjZO0RMxuMrUqBAAnkHTlPWm8sBKZTPlzfsgvYx4piR8MhICjw==
X-Received: by 2002:a05:6102:e12:b0:7a4:ebdb:cc0c with SMTP id ada2fe7eead31-7a55a72b4d1mr4153772137.6.1789923540237; Sun, 20 Sep 2026 09:59:00 -0700 (PDT)
MIME-Version: 1.0
References: <9703C501-9D43-41FA-B4C4-C0055BED9A9B@brandedcode.com>
In-Reply-To: <9703C501-9D43-41FA-B4C4-C0055BED9A9B@brandedcode.com>
From: Warren Parad <wparad@rhosys.ch>
Date: Sun, 20 Sep 2026 18:58:52 +0200
X-Gm-Features: AcwNN1UGKHKp9Jc5F_XsMiPtNJd1sUrIoOZnI4mv0m8kOQnjrVO8qU6Qhp7kpzs
Message-ID: <CAJot-L0oMSeasYFZXHLxRnd6+jR+xHmTYFaFv4Pp4t=K37rjqw@mail.gmail.com>
To: "Emelia S." <emelia=40brandedcode.com@dmarc.ietf.org>
Content-Type: multipart/alternative; boundary="000000000000ca9067065bed0c1a"
X-Spamd-Bar: --
Message-ID-Hash: U4PX7CCZZXKYCTPXEAO63AEY7U7XLHPO
X-Message-ID-Hash: U4PX7CCZZXKYCTPXEAO63AEY7U7XLHPO
X-MailFrom: wparad@rhosys.ch
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-oauth.ietf.org-0; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: oauth <oauth@ietf.org>
X-Mailman-Version: 3.3.10
Precedence: list
Subject: [OAUTH-WG] Re: Possibly incorrect IANA registry contents for Error Registry
List-Id: OAUTH WG <oauth.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/9CzE8IwjEOb3F4nur9ioO1D38ms>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Owner: <mailto:oauth-owner@ietf.org>
List-Post: <mailto:oauth@ietf.org>
List-Subscribe: <mailto:oauth-join@ietf.org>
List-Unsubscribe: <mailto:oauth-leave@ietf.org>

Yes it's valid. No it isn't redirectable.

On Sun, Sep 20, 2026, 18:37 Emelia S. <emelia=
40brandedcode.com@dmarc.ietf.org> wrote:

> Hi all,
>
> In the OAuth Extensions Error Registry managed by IANA, invalid_client is
> listed as having a usage location of "token endpoint, authorization
> endpoint", citing RFC6749, however, RFC6749's Section 4.1.2.1
> "Authorization Code Grant -> Authorization Response -> Error Response" does
> not list invalid_client.
>
> https://www.iana.org/assignments/oauth-parameters#extensions-error
>
> I'm not sure where the IANA registry contents is from, given that RFC6749
> does not include the initial registry contents. The only place
> invalid_client is listed in RFC6749 is on the token endpoint.
>
> Can someone clarify if `invalid_client` is valid for the authorization
> endpoint and if that error is redirectable?
>
> — Emelia
> _______________________________________________
> OAuth mailing list -- oauth@ietf.org
> To unsubscribe send an email to oauth-leave@ietf.org
>