Re: [OAUTH-WG] OAuth Device Flow

Aaron Parecki <aaron@parecki.com> Fri, 13 November 2015 22:02 UTC

Return-Path: <aaron@parecki.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 67C0D1B3328 for <oauth@ietfa.amsl.com>; Fri, 13 Nov 2015 14:02:20 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.277
X-Spam-Level:
X-Spam-Status: No, score=-1.277 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pwrc5m-TPrdj for <oauth@ietfa.amsl.com>; Fri, 13 Nov 2015 14:02:19 -0800 (PST)
Received: from mail-io0-x235.google.com (mail-io0-x235.google.com [IPv6:2607:f8b0:4001:c06::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E3F991B306A for <oauth@ietf.org>; Fri, 13 Nov 2015 14:02:18 -0800 (PST)
Received: by ioc74 with SMTP id 74so111077078ioc.2 for <oauth@ietf.org>; Fri, 13 Nov 2015 14:02:18 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=parecki_com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=zlvnyYLylz4RZwMYMqIHojX2fvWttGY/sH5L5J+ogJA=; b=gifFwZ6m6+21mewX5VftnD1mHXYn7xD2ZmTmVOu8M4bT/6bvC9p3urOERFLSJdKfcC WpF824G6O5WJ3pDewlonXeT7yn2qf3fXeyta885exzutQaSlToFlXoDO1rJLeRseWUaV vtGinzF1/wN1DwO1E1gvsxVS5VOajlpbpUMqLCrtNethqlFcI00rklprPvfdYXjBBdFx A/7vMYNv7f/boe++BLNdXnC+JFoj8cfVVL1DWIsfqgS969+I+QCgG01ODRgZiQ5GaJlm YavrFNCaUgXO7r5XHIn+7cWrb2ADyxgIwMIHF9PuJyoXMD8Iabt0SfEQ8MRqOh68tu6O d/4w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=zlvnyYLylz4RZwMYMqIHojX2fvWttGY/sH5L5J+ogJA=; b=VdVRXiLvB9iA0ZUlrPkFtOGqSFlDjsKP4aKsQreaiqOv+gehwDUFR5g9M4rJcv1t8u B+GFEiZuV+hY4N5wKZJRhamLsJEb5om91L/UOIZebWjPT08JrABVdsZUXGISYlQeqn8a Wue4bDH2bMuCLH3cy7YrLBqQ4lV86CzS10jDXd/KDhI4cM7H6n+r5vvT6f4K1XuNJMIr ItIaJ5loLGodpj4lNpveQ9s+18jyer+AD9DqJt0wjV8ukYgdcbDWP7RY+fERm3aVVoV9 +DL282oQc650u9ifvEW2IPl0UFg169G4uoLs6qPImpQ0i2XKu3G+SQjorb7kLEsYmJd9 ickQ==
X-Gm-Message-State: ALoCoQmAOxt4F1VpYhSVyKe7VAhcBNmJc2G38O8ztcLcxjgTyDsH8b4xIABALyHmT9wdUwdMT3/W
X-Received: by 10.107.3.42 with SMTP id 42mr22588001iod.83.1447452138269; Fri, 13 Nov 2015 14:02:18 -0800 (PST)
Received: from mail-ig0-f173.google.com (mail-ig0-f173.google.com. [209.85.213.173]) by smtp.gmail.com with ESMTPSA id b81sm7552192ioj.30.2015.11.13.14.02.17 for <oauth@ietf.org> (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 13 Nov 2015 14:02:17 -0800 (PST)
Received: by igl9 with SMTP id 9so25162407igl.0 for <oauth@ietf.org>; Fri, 13 Nov 2015 14:02:17 -0800 (PST)
MIME-Version: 1.0
X-Received: by 10.50.43.225 with SMTP id z1mr5594431igl.19.1447452137181; Fri, 13 Nov 2015 14:02:17 -0800 (PST)
Received: by 10.107.181.78 with HTTP; Fri, 13 Nov 2015 14:02:17 -0800 (PST)
In-Reply-To: <563AA676.4060106@gmx.net>
References: <563AA676.4060106@gmx.net>
Date: Fri, 13 Nov 2015 14:02:17 -0800
X-Gmail-Original-Message-ID: <CAGBSGjp4aWs6ZWGtPxq6-ENiExx7emNXhKr7d2cjycpdUaAQwQ@mail.gmail.com>
Message-ID: <CAGBSGjp4aWs6ZWGtPxq6-ENiExx7emNXhKr7d2cjycpdUaAQwQ@mail.gmail.com>
From: Aaron Parecki <aaron@parecki.com>
To: Hannes Tschofenig <hannes.tschofenig@gmx.net>
Content-Type: multipart/alternative; boundary="089e010d8dd6775deb0524733668"
Archived-At: <http://mailarchive.ietf.org/arch/msg/oauth/JzH-isRij9kCpbEJpXVqwZ6XjjU>
Cc: "oauth@ietf.org" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] OAuth Device Flow
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Nov 2015 22:02:20 -0000

I just noticed a typo, section 3.2 should refer to RFC6749 section 4.1.3
instead of 4.1.1

https://tools.ietf.org/html/draft-denniss-oauth-device-flow-00#section-3.2

Section 4.1.1 is the authorization request, 4.1.3 is the access token
request which I believe is what's supposed to be referenced.

----
Aaron Parecki
aaronparecki.com
@aaronpk <http://twitter.com/aaronpk>


On Wed, Nov 4, 2015 at 4:44 PM, Hannes Tschofenig <hannes.tschofenig@gmx.net
> wrote:

> FYI: A couple of us got together and re-published an old, expired draft
> about the OAuth Device Flow.
>
> Here is the document:
> https://tools.ietf.org/html/draft-denniss-oauth-device-flow-00
>
> For the -00 version we tired to keep it inline with what has been
> available with draft-recordon-oauth-v2-device-00. In upcoming versions
> of this document we would like to capture existing deployment.
>
> Here are two deployment examples that are reasonably well described:
>
> - Google
> https://developers.google.com/youtube/v3/guides/auth/devices
>
> - Facebook
> https://developers.facebook.com/docs/facebook-login/for-devices
>
> Ciao
> Hannes
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>
>