Re: [OAUTH-WG] [apps-discuss] FW: Appsdir review of draft-ietf-oauth-v2-23

[Barry Leiba <[e-mail]>]

Henry says...
>> No, I appreciate that you want to use registered short names in the protocol,
>> that's just fine.  My problem is that you have left users, developers etc. with
>> no way to discover what shortnames have been registered short of a non-
>> trivial and error-prone informal search effort.
>>
>> What I'm asking for is support for probe URI prefixes for each family of
>> shortnames.  So, just as today I use "text/n3" as the media type for my
>> Notation3 documents, I can check that this is a registered media type by
>> attempting to retrieve
>>
>>  http://www.iana.org/assignments/media-types/text/n3
>>
>> and I can see all the registered text types by retrieving from
>>
>>  http://www.iana.org/assignments/media-types/text
>>
>> likewise I ought to be able to check e.g. the "bearer" token type by
>> attempting retrieval from (something along the lines of)
>>
>>  http://www.iana.org/assignments/access-token-types/bearer
>>
>> and I should be able to see all the registered token types by retrieving from
>>
>>  http://www.iana.org/assignments/access-token-types
>>
>> Hope this clarifies what I meant.

Eran says...
> Not sure I understand what you are asking for, but what would the IANA instruction include to support this?

Yeh, I'm not understanding this either.  The spec establishes an
access-token-type registry, and anyone will be able to look in that
registry the same way they look in any other IANA registry, such as
media-types.  It looks like Henry is asking for this to use some sort
of type/subtype mechanism, as media-types does, wherein when a new
token type is registered, that registration or subsequent ones can
create subtypes of that token type.

But it's not clear that such a type/subtype scheme would always apply
here, as it does with media types.  Some token types will have no
subtypes.  What makes more sense is for the token types that need to
create their own sub-registries to do so.  And then those entries will
be found from IANA as well -- no error-prone informal search effort
should be needed.

Or am I missing the same thing Eran is?

Barry