Re: [OAUTH-WG] Change grant_type="none" to something less confusing

+1 for something different but not "client password" as sounds like it
would preclude other methods of client authentication

On Fri, Jul 16, 2010 at 10:41 AM, Brian Eaton <beaton@google.com> wrote:
> +1.
>
> How about calling it "client password", or something along those
> lines...?  That's what Dick called it for WRAP.
>
> http://tools.ietf.org/html/draft-hardt-oauth-01#page-13
>
> Cheers,
> Brian
>
> On Fri, Jul 16, 2010 at 9:39 AM, Marius Scurtescu <mscurtescu@google.com> wrote:
>> I agree that grant_type=none is confusing. "client" or "direct" sound better.
>>
>> Marius
>>
>>
>>
>> On Fri, Jul 16, 2010 at 9:30 AM, Justin Richer <jricher@mitre.org> wrote:
>>> The choice of the value "none" for the grant_type parameter in the
>>> client-credentials case is confusing. I understand the philosophy behind
>>> this choice, but I think that calling it "none" here gives the wrong
>>> impression. It almost sounds like it's a deny-request on first glance,
>>> or even a revoke request of some type. Furthermore, I'd say that there
>>> really is an access grant being made here, but it's implicit, and given
>>> to the client directly and not to an end user.
>>>
>>> I propose we change this key to "client", "implicit", "direct", or
>>> something other than "none" to avoid this kind of confusion. Along with
>>> this, I would also like the paragraph in 4.1 describing the usage of
>>> this grant type to be pulled into its own (admittedly short) subsection.
>>> In this way, someone looking to implement this style of auth will have
>>> somewhere concrete to look, bringing this method on par with others in
>>> section 4.1.
>>>
>>>  -- Justin
>>>
>>> _______________________________________________
>>> OAuth mailing list
>>> OAuth@ietf.org
>>> https://www.ietf.org/mailman/listinfo/oauth
>>>
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
>>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>