[OAUTH-WG] OAuth 2 for Native Apps

Marius Scurtescu <mscurtescu@google.com> Mon, 07 June 2010 19:26 UTC

Return-Path: <mscurtescu@google.com>
X-Original-To: oauth@core3.amsl.com
Delivered-To: oauth@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 93ADE3A6802 for <oauth@core3.amsl.com>; Mon, 7 Jun 2010 12:26:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -99.377
X-Spam-Level:
X-Spam-Status: No, score=-99.377 tagged_above=-999 required=5 tests=[BAYES_50=0.001, FM_FORGED_GMAIL=0.622, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TADk7d9e7r9A for <oauth@core3.amsl.com>; Mon, 7 Jun 2010 12:26:23 -0700 (PDT)
Received: from smtp-out.google.com (smtp-out.google.com [74.125.121.35]) by core3.amsl.com (Postfix) with ESMTP id 8B0733A680E for <oauth@ietf.org>; Mon, 7 Jun 2010 12:26:22 -0700 (PDT)
Received: from kpbe16.cbf.corp.google.com (kpbe16.cbf.corp.google.com [172.25.105.80]) by smtp-out.google.com with ESMTP id o57JQGhh030777 for <oauth@ietf.org>; Mon, 7 Jun 2010 12:26:16 -0700
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=google.com; s=beta; t=1275938777; bh=8XirLNDD06U4bz2L18r6w5MUKxo=; h=MIME-Version:From:Date:Message-ID:Subject:To:Content-Type; b=ERxGv27+lnU704fA9eAbUglGd60N295ZmzrVgaJHzfVRuzZiRwrXVLmqyzyJuKnJC G845lipW7KP9zMB3EgKYA==
DomainKey-Signature: a=rsa-sha1; s=beta; d=google.com; c=nofws; q=dns; h=mime-version:from:date:message-id:subject:to:content-type; b=nMRJY3VeDMtfgBGa5VLsPyYr0gZjNTl7FVP+swvjqLjLCaIIKE5vOpU6IZTAdBNta pGwsJ72Dm48Zqp/msnHSQ==
Received: from pxi6 (pxi6.prod.google.com [10.243.27.6]) by kpbe16.cbf.corp.google.com with ESMTP id o57JQFrN030978 for <oauth@ietf.org>; Mon, 7 Jun 2010 12:26:15 -0700
Received: by pxi6 with SMTP id 6so1466573pxi.1 for <oauth@ietf.org>; Mon, 07 Jun 2010 12:26:14 -0700 (PDT)
Received: by 10.141.214.41 with SMTP id r41mr12352322rvq.77.1275938774874; Mon, 07 Jun 2010 12:26:14 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.141.124.13 with HTTP; Mon, 7 Jun 2010 12:25:53 -0700 (PDT)
From: Marius Scurtescu <mscurtescu@google.com>
Date: Mon, 07 Jun 2010 12:25:53 -0700
Message-ID: <AANLkTil1BK4e6o6XSztS31Y-RhXgn01MByP7EBP9twwl@mail.gmail.com>
To: OAuth WG <oauth@ietf.org>
Content-Type: multipart/mixed; boundary="000e0cd1a89a6e7a66048875a5f1"
Subject: [OAUTH-WG] OAuth 2 for Native Apps
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 07 Jun 2010 19:26:24 -0000

Hi,

I attached a document that summaries how native applications can use OAuth 2.

Feedback more than welcome, especially if you have experience with
native apps and OAuth.

The current Web Server and Device flows need small changes and
clarifications in order to properly support native apps, I will start
a separate thread on that.

Marius