IETF Logo Mail Archive

Re: [OAUTH-WG] Change grant_type="none" to something less confusing

Brian Campbell <bcampbell@pingidentity.com> Fri, 16 July 2010 21:15 UTC

Return-Path: <bcampbell@pingidentity.com>
X-Original-To: oauth@core3.amsl.com
Delivered-To: oauth@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 40B193A69D9 for <oauth@core3.amsl.com>; Fri, 16 Jul 2010 14:15:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.782
X-Spam-Level:
X-Spam-Status: No, score=-5.782 tagged_above=-999 required=5 tests=[AWL=0.195, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eLDO8-P4SaQf for <oauth@core3.amsl.com>; Fri, 16 Jul 2010 14:15:45 -0700 (PDT)
Received: from na3sys009aog101.obsmtp.com (na3sys009aog101.obsmtp.com [74.125.149.67]) by core3.amsl.com (Postfix) with SMTP id E5DE73A684E for <oauth@ietf.org>; Fri, 16 Jul 2010 14:15:44 -0700 (PDT)
Received: from source ([209.85.161.50]) by na3sys009aob101.postini.com ([74.125.148.12]) with SMTP ID DSNKTEDMDAyILUw0AA2T9AddyNA20drCUDUl@postini.com; Fri, 16 Jul 2010 14:15:57 PDT
Received: by mail-fx0-f50.google.com with SMTP id 9so1315993fxm.9 for <oauth@ietf.org>; Fri, 16 Jul 2010 14:15:56 -0700 (PDT)
Received: by 10.223.116.136 with SMTP id m8mr1143307faq.50.1279314956213; Fri, 16 Jul 2010 14:15:56 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.223.105.135 with HTTP; Fri, 16 Jul 2010 14:15:26 -0700 (PDT)
In-Reply-To: <AANLkTinbbIJ03UPFWibPJC569ckseU33Tnyf-1BYRGj2@mail.gmail.com>
References: <1279297826.11628.61.camel@localhost.localdomain> <AANLkTinRE0My8GRTVrBM9cwyCWgrpeYQzul3YBp_Z-8A@mail.gmail.com> <AANLkTim_GpxKx2G6FQN9TGwMYxnRv4N7pOo7Yo3g2s6c@mail.gmail.com> <AANLkTinDwGDYq4IYA9BKJakdEMnR8FbruTqR4i_zS88p@mail.gmail.com> <AANLkTinbbIJ03UPFWibPJC569ckseU33Tnyf-1BYRGj2@mail.gmail.com>
From: Brian Campbell <bcampbell@pingidentity.com>
Date: Fri, 16 Jul 2010 15:15:26 -0600
Message-ID: <AANLkTika6bQRisP7ljj0aqB1c6Qy3cO-0AUcvTKeWUR3@mail.gmail.com>
To: Brian Eaton <beaton@google.com>
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: quoted-printable
Cc: OAuth WG <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Change grant_type="none" to something less confusing
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 16 Jul 2010 21:15:46 -0000

I guess I don't see why there's a need to distinguish between, in the
grant type identifier, how the client authenticates?   (this is all
presupposes, of course, some kind of assertion based client
authentication technique)

On Fri, Jul 16, 2010 at 1:26 PM, Brian Eaton <beaton@google.com> wrote:
> On Fri, Jul 16, 2010 at 12:22 PM, Brian Campbell
> <bcampbell@pingidentity.com> wrote:
>> +1 for something different but not "client password" as sounds like it
>> would preclude other methods of client authentication
>
> I think it would work like this:
>
> grant_type=client_password:
>     maps to the "client password flow" from
> http://tools.ietf.org/html/draft-hardt-oauth-01#page-13.
>
> grant_type=client_assertion
>     maps to the "client assertion" profile
> http://tools.ietf.org/html/draft-hardt-oauth-01#section-5.2
>
> Cheers,
> Brian
>

v2.35.0 | Report a Bug | By Email | System Status