[OAUTH-WG] Re: WG Last Call: draft-ietf-oauth-first-party-apps-03 (Ends 2026-07-13)

Filip Skokan <panva.ip@gmail.com> Fri, 26 June 2026 07:44 UTC

Return-Path: <panva.ip@gmail.com>
X-Original-To: oauth@mail2.ietf.org
Delivered-To: oauth@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 8513E107C8352 for <oauth@mail2.ietf.org>; Fri, 26 Jun 2026 00:44:22 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1782459862; bh=1vjfS23Rn1cfbqu3M3SbGkeYCvtpepLVyhTTpqlCuDs=; h=References:In-Reply-To:From:Date:Subject:To:Cc; b=VR9y1KhIfYGgNv/Q76wf32XqIbCqUxZhxlVG+uHWFZ4V48adF8fbJjUZlFKfNLyqY u31qjk6GPQU7WB//mOwQE0nRkyE1SkauG1iT/IIAjGPZXiUn9YXhgluAuUpzTzKvk7 nmOmjtfiWms1bECZC8jWlb2HOfh+to+ehy+lCnTc=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mFv3d77dkK_d for <oauth@mail2.ietf.org>; Fri, 26 Jun 2026 00:44:22 -0700 (PDT)
Received: from mail-qv1-xf32.google.com (mail-qv1-xf32.google.com [IPv6:2607:f8b0:4864:20::f32]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 04114107C834A for <oauth@ietf.org>; Fri, 26 Jun 2026 00:44:22 -0700 (PDT)
Received: by mail-qv1-xf32.google.com with SMTP id 6a1803df08f44-8dfdfe27ba0so9065496d6.2 for <oauth@ietf.org>; Fri, 26 Jun 2026 00:44:22 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1782459861; cv=none; d=google.com; s=arc-20260327; b=AvM5gfPJYUc90CgXDow0GKErm+98G3CRixtElmtFXYNOx1nANJyauw6omTINBuMJAN qxh9zdG/x5EIhBILju8vKrgQ+16NuqGXHTDR5+MjUCMi/2PNReEfRLVTFFYMXpB24ik2 h8wwmiApWWN1B+p02+zuleoaknbxB+rfiWsQf0PnYCTIcn9uoaK+04X5zrzLBnwv2xRI 5z/+d/xcZ6U49cQ6ybLaRdBNZyLb/wioiEEz52tmW4IC/Eqv6nKa2xcORjf8AZm//t/0 szdsRA/7SyjkUevcBwCQK+ed4sYClV0abLFU03Dj3ESj4cNMUf3nSsvaiwHJdNketl7+ 77gA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=A8YjejPiqDSjskhb01h7AP5cxjcLkWQmadXja1kw8ME=; fh=nqE6W8UcAbT5fs0plweF9dfl9iWRsN3ZfYV/UgWtpJk=; b=bmYTTX07DKylbzdsisbZR2JgingbOD0bdzX6GN7n+5uSjHdSrXIB1H4SwHgL/pvnyo uxphtQm8jgvXf9FuL6YxOlS9hiI64pbw45Da2d8OklMAHe6XBc0IE1HnHSiwt7tZJjnJ lpuxYWC5Q5+k5qMMhYN5+c+dqYgykZQn5IB3dyJCVPu6e+RtynBW9GyjX1vQTJ5N7bW/ JB1o5BhtKQvOF5+JYBZIy739xaN7UqRwsF9l3LA7eSo/EbtK+LOVfdt4XHtjx/CDfBWw 02w+BlXH1oZgwYO32JymYLcw0ONKmHcBfmfSDVm4z3GZc3uFs34hrZD6w6dYJm/G9ZMB t5Ug==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1782459861; x=1783064661; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=A8YjejPiqDSjskhb01h7AP5cxjcLkWQmadXja1kw8ME=; b=eAz/Pw1TrM9Mt83GHlnw4jLPB1oT+bMlj3JC1KuTPyhYGg3GXvPoxbGl9PzEaWnI8I GsArh/4FTVZT7e+SiDO196eSwwF9E6+tI/m+C/DBslaIxCjLM4c4SdnA+T/HSYz35RgP fRm6I6trfpqiB3XOpnNwbZwIfRz7W6uo0A9ADQ4EM5AuxGLUMO6igwCfBoUQ0Sr1JzSk sRFVkeqGp+dIKhshCCqaiWri5T3IqfAS+RTXwlkpiMFi3NMUVDP1qHB9zsAUYyg02KMH nNNAivRPpvUu+ydnDA1C0furWqkzhi9Swhsqg9UB5nFJN6AuP7b8/I+LG6LRvdVu94on 09ww==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1782459861; x=1783064661; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=A8YjejPiqDSjskhb01h7AP5cxjcLkWQmadXja1kw8ME=; b=QF1SrCLS/+pSeqm+MR94+izvtJcscOSbZILBpK7AH5s1BtdQWMzg0RM9ZQo2nEk8O7 AryHm2VE6y9x7bkqJV1gQCOPnG33vm8M8DbcI+CaQwJuZqcRtlrAd+561rFbMf2/ywQr 8z0dKMmNTNrgQQ9FMPjH4O25YAwP8r7ph83lbTlNXPEtuZelzCjGXEVmlyKA5tn3sdfs 6mBXMzGpc07Vht05D6agFQD3eS53DeIScQJtGjNObaH2xH0MMEPko2ZBIsysK2jWe7wi Y7ubnS/AtaHPrCvJ1D4FVtauXiU7sGF+Nqsbftezv87WNCZqWYvU0mWfDIZphZpVZA76 e1Dw==
X-Forwarded-Encrypted: i=1; AHgh+RoZdu8YC3PM8UN+QTCq9J4cwbuPN1getIjYaUGBkKpV9wu3OCy/5sREnE/N2v/XaQLbnq7ycw==@ietf.org
X-Gm-Message-State: AOJu0YxRGcJmGSnZBehqmDzjpQqT01wbVskSk2RCcsFP5SjMUWikRKs7 ukMBRXvgiiIOLjaMZbjmsCkWWkU9BU1/+nowOb4YjAsBY9DAFjf8o/IAUqxOrTCVx55Vlh1pa2B 2yYAqYGh2kubkcPdOscuZBqMY6HPUjA==
X-Gm-Gg: AfdE7clRo2Lpzp044xg2jON9iHcXUYELZIo+UscZ4yu+crLLM1m0c1lbAL72PXVbBLX suouJQwG43anfaoGNHJhcMCCvH5V4Ha56uxy6yVZF5IFwLb8vVjkInYsrhlLdO3IeHWhqFKpvhN IiVwklVBBeoHyXN5Q2vkLgkSSrfwvCPAfW9JroHbo4R0a8hbJvlj57TxTFAZz9jGvdwSvo9jpgv VZiW5uVsyjew7fc1zgMIg8JfZz5FqyKlYRdLSQTikZI35LboVHHGy4xb0L4msqwlwmzj09+HDbK EvLErNg=
X-Received: by 2002:a05:6214:1310:b0:8c9:c38a:20e1 with SMTP id 6a1803df08f44-8e6d2dd299amr102265566d6.10.1782459861356; Fri, 26 Jun 2026 00:44:21 -0700 (PDT)
MIME-Version: 1.0
References: <178241272264.1672629.10511579342179043034@dt-datatracker-f9b87776f-8pmmg>
In-Reply-To: <178241272264.1672629.10511579342179043034@dt-datatracker-f9b87776f-8pmmg>
From: Filip Skokan <panva.ip@gmail.com>
Date: Fri, 26 Jun 2026 09:43:45 +0200
X-Gm-Features: AVVi8CdTmxbjwtXZl2AcQzJD4s9e_piqCgaNS8RfjVkFWnkClWLEKc9aI1Sk-1I
Message-ID: <CALAqi_8x7ccs2eS5+ZtbG=O5dkUoB4g_rg_q89_m0oJ05y7E5A@mail.gmail.com>
To: Rifaat Shekh-Yusef <rifaat.s.ietf@gmail.com>
Content-Type: multipart/alternative; boundary="000000000000dcd5530655234653"
Message-ID-Hash: DO43OTKIX42DLXJ6VFZ3EIQYI67ELSKN
X-Message-ID-Hash: DO43OTKIX42DLXJ6VFZ3EIQYI67ELSKN
X-MailFrom: panva.ip@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-oauth.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: draft-ietf-oauth-first-party-apps@ietf.org, oauth-chairs@ietf.org, oauth@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [OAUTH-WG] Re: WG Last Call: draft-ietf-oauth-first-party-apps-03 (Ends 2026-07-13)
List-Id: OAUTH WG <oauth.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/TKehQeY-YcUXJQJhYC2mDeHLASA>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Owner: <mailto:oauth-owner@ietf.org>
List-Post: <mailto:oauth@ietf.org>
List-Subscribe: <mailto:oauth-join@ietf.org>
List-Unsubscribe: <mailto:oauth-leave@ietf.org>

I've reviewed the document and support its publication. I've proposed a
number of editorial fixes in a PR
<https://github.com/oauth-wg/oauth-first-party-apps/pull/178> to
resolve typos, grammar, and general inconsistencies in wording used
throughout the document.

S pozdravem,
*Filip Skokan*


On Thu, 25 Jun 2026 at 20:38, Rifaat Shekh-Yusef via Datatracker <
noreply@ietf.org> wrote:

> This message starts a WG Last Call for:
> draft-ietf-oauth-first-party-apps-03
>
> This Working Group Last Call ends on 2026-07-13
>
> Abstract:
>    This document defines the Authorization Challenge Endpoint, which
>    supports clients that want to control the process of obtaining
>    authorization from the user using a native experience.
>
>    In many cases, this can provide an entirely browserless OAuth 2.0
>    experience suited for native applications, only delegating to the
>    browser in unexpected, high risk, or error conditions.
>
> File can be retrieved from:
>
> Please review and indicate your support or objection to proceed with the
> publication of this document by replying to this email keeping
> oauth@ietf.org
> in copy. Objections should be explained and suggestions to resolve them are
> highly appreciated.
>
> Authors, and WG participants in general, are reminded of the Intellectual
> Property Rights (IPR) disclosure obligations described in BCP 79 [1].
> Appropriate IPR disclosures required for full conformance with the
> provisions
> of BCP 78 [1] and BCP 79 [2] must be filed, if you are aware of any.
> Sanctions available for application to violators of IETF IPR Policy can be
> found at [3].
>
> Thank you.
>
> [1] https://datatracker.ietf.org/doc/bcp78/
> [2] https://datatracker.ietf.org/doc/bcp79/
> [3] https://datatracker.ietf.org/doc/rfc6701/
>
> The IETF datatracker status page for this Internet-Draft is:
> https://datatracker.ietf.org/doc/draft-ietf-oauth-first-party-apps/
>
> There is also an HTML version available at:
> https://www.ietf.org/archive/id/draft-ietf-oauth-first-party-apps-03.html
>
> A diff from the previous version is available at:
>
> https://author-tools.ietf.org/iddiff?url2=draft-ietf-oauth-first-party-apps-03
>
> _______________________________________________
> OAuth mailing list -- oauth@ietf.org
> To unsubscribe send an email to oauth-leave@ietf.org
>