DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma;
 h=subject:mime-version:content-type:from:in-reply-to:date:cc
 :content-transfer-encoding:message-id:references:to:x-mailer;
 b=WUrX5+3P2FTIq13qj/ox4ACxgXdaXa310y4J0ExLYueDw+HsuD9wzWHZvSiWgC1mOb
 yDGWumGpid+c+idBrpusF2qnEfpXwZo8YS75PL64N+B8prwVad/qgHcaL+4AQiftttCH
 8X02/2vI5wmDYoQj4UhhiWuOlG/yOdj9Jp3tY=
Mime-Version: 1.0 (Apple Message framework v1081)
Content-Type: text/plain; charset=us-ascii
From: Dick Hardt <dick.hardt@gmail.com>
In-Reply-To: <3D3C75174CB95F42AD6BCC56E5555B4502BE07CC@FIESEXC015.nsn-intra.net>
Date: Wed, 23 Jun 2010 09:02:27 -0700
Content-Transfer-Encoding: quoted-printable
Message-Id: <E7A7F197-3BBC-43F2-8242-D0164057A39A@gmail.com>
References: <3D3C75174CB95F42AD6BCC56E5555B4502BE07CC@FIESEXC015.nsn-intra.net>
To: "Tschofenig, Hannes (NSN - FI/Espoo)" <hannes.tschofenig@nsn.com>
Cc: OAuth WG <oauth@ietf.org>
Subject: [OAUTH-WG] Scope :: Was:  Extensibility for OAuth?
Precedence: list

On 2010-06-22, at 11:07 PM, Tschofenig, Hannes (NSN - FI/Espoo) wrote:

> "
>   scope
>         OPTIONAL.  The scope of the access request expressed as a list
>         of space-delimited strings.  The value of the "scope" =
parameter
>         is defined by the authorization server.  If the value contains
>         multiple space-delimited strings, their order does not matter,
>         and each string adds an additional access range to the
>         requested scope.
> "
>=20
> Do folks think it would be useful to have standardized values?=20

Not at this time. The semantics of scope are all over the place. If =
standardized, people will feel they need to pick one that is close to =
what they want, but is not exactly what they mean. I think it is better =
for the AS to define what they mean by a scope and give it a name that =
makes sense in that context.

>=20
> If the answer is "yes", then it would be useful to differentiate the
> standardized values from those values that are purely defined locally =
by
> the authorization server.=20