Re: [OAUTH-WG] error_description USASCII-encoded - is this a difficulty?

Hannes Tschofenig <hannes.tschofenig@gmx.net> Fri, 18 January 2013 09:40 UTC

Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7837C21F8865 for <oauth@ietfa.amsl.com>; Fri, 18 Jan 2013 01:40:41 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.29
X-Spam-Level:
X-Spam-Status: No, score=-102.29 tagged_above=-999 required=5 tests=[AWL=-0.310, BAYES_00=-2.599, RCVD_IN_SORBS_WEB=0.619, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id k9nJaX4iXVwb for <oauth@ietfa.amsl.com>; Fri, 18 Jan 2013 01:40:40 -0800 (PST)
Received: from mout.gmx.net (mout.gmx.net [212.227.15.19]) by ietfa.amsl.com (Postfix) with ESMTP id 4436721F883F for <oauth@ietf.org>; Fri, 18 Jan 2013 01:40:40 -0800 (PST)
Received: from mailout-de.gmx.net ([10.1.76.2]) by mrigmx.server.lan (mrigmx001) with ESMTP (Nemesis) id 0LjP2f-1TMFSK1E1X-00dZzz for <oauth@ietf.org>; Fri, 18 Jan 2013 10:40:39 +0100
Received: (qmail invoked by alias); 18 Jan 2013 09:40:39 -0000
Received: from unknown (EHLO [10.255.132.15]) [194.251.119.201] by mail.gmx.net (mp002) with SMTP; 18 Jan 2013 10:40:39 +0100
X-Authenticated: #29516787
X-Provags-ID: V01U2FsdGVkX1/sgnE1om7sVurS8JXMhTVaxCbLcIwjpEa5NMyzcm O2x2ovKXl3Oavp
Mime-Version: 1.0 (Apple Message framework v1085)
Content-Type: text/plain; charset=us-ascii
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
In-Reply-To: <OF89C2383F.5888D4B7-ON85257AF6.005D229B-85257AF6.0063BA05@us.ibm.com>
Date: Fri, 18 Jan 2013 11:40:36 +0200
Content-Transfer-Encoding: quoted-printable
Message-Id: <814E753D-E176-40A2-9208-6A575F46DA99@gmx.net>
References: <OF89C2383F.5888D4B7-ON85257AF6.005D229B-85257AF6.0063BA05@us.ibm.com>
To: Todd W Lainhart <lainhart@us.ibm.com>
X-Mailer: Apple Mail (2.1085)
X-Y-GMX-Trusted: 0
Cc: oauth@ietf.org, oauth-bounces@ietf.org
Subject: Re: [OAUTH-WG] error_description USASCII-encoded - is this a difficulty?
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 18 Jan 2013 09:40:41 -0000

Hi Todd, 

it is important to note that the error_description is not meant to be shown to the end users.
That was the reason for not introducing internationalization support. 

If you want to provide some additional information about the error description in other languages I would suggest to use the error_uri to point the developer to that information. 

Ciao
Hannes

On Jan 17, 2013, at 8:09 PM, Todd W Lainhart wrote:

> We're working on an OAuth 2.0 AS, with extensions defined for session mgmt.  We're trying to adopt uniformly the error reporting mechanism in 6749. 
> 
> I'm now realizing that the error_description response in specified to be USASCII.  I was assuming that the error message could be UTF-8 encoded, such that I could return error messages in the client's locale.  E.G. consider the client credentials grant.  The store on the AS holding the registration is down, so I'd like to return a 500 with an error message from the store, from a catalog mapped to the client's language. 
> 
> I've wondered about adding an additional response parameter, something like error_description_locale, but thought that there might be better practices out there.  I'm also wondering about the USASCII constraint on error_description.  I'm a long-time reader of this list, but I'm not recalling the background on this.
> 
> 
> 
> 
> Todd Lainhart
> Rational software
> IBM Corporation
> 550 King Street, Littleton, MA 01460-1250
> 1-978-899-4705
> 2-276-4705 (T/L)
> lainhart@us.ibm.com
> 
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth