[OAUTH-WG] Clarification: authorization server matching of redirect URI

Dick Hardt <dick.hardt@gmail.com> Mon, 19 April 2010 04:22 UTC

Return-Path: <dick.hardt@gmail.com>
X-Original-To: oauth@core3.amsl.com
Delivered-To: oauth@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 34A3C3A6808 for <oauth@core3.amsl.com>; Sun, 18 Apr 2010 21:22:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.295
X-Spam-Level:
X-Spam-Status: No, score=-2.295 tagged_above=-999 required=5 tests=[AWL=0.304, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7Y42d5FSOT61 for <oauth@core3.amsl.com>; Sun, 18 Apr 2010 21:22:30 -0700 (PDT)
Received: from mail-gy0-f172.google.com (mail-gy0-f172.google.com [209.85.160.172]) by core3.amsl.com (Postfix) with ESMTP id 26DC228C0FA for <oauth@ietf.org>; Sun, 18 Apr 2010 21:22:22 -0700 (PDT)
Received: by gyh4 with SMTP id 4so2458250gyh.31 for <oauth@ietf.org>; Sun, 18 Apr 2010 21:22:09 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:from:content-type :content-transfer-encoding:subject:date:message-id:to:mime-version :x-mailer; bh=pSDsCcNB0Dp6dsmJKnQqZXsMXODXJzMyLImhpz+RhSA=; b=fYjucqo0av2pf7NxG3GXOVjx13ZWVELNpNka4eusPJk2DQDegmD5rDToumBOu70oTN xnZQphEtA1zhBvrrUpUIaH9K4gOHlIgU1R36MWgweG0q7L6PXZtwShLv8VIsjdSLHWws DmajcoR8B4+2UeKbhj1s5kykJrkBKuBrZemlQ=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=from:content-type:content-transfer-encoding:subject:date:message-id :to:mime-version:x-mailer; b=F9Lf2a1Qe2U6XvO3xWeLfSRI/WPppWz01lgtr/5nHlJ1LkjpwFJYMQfNVIyYizm+v0 Bve07NJWI21VJmzPniykFOmlnlF1pEFGdQoGDxwHOcZHDmjygPUmyGWLuFBwejEYCh55 mStH07JsBAPiECiEFSwRpYCmUhIvkjaVw0CGI=
Received: by 10.101.27.3 with SMTP id e3mr12347997anj.123.1271650928630; Sun, 18 Apr 2010 21:22:08 -0700 (PDT)
Received: from [10.0.1.8] (c-67-180-195-167.hsd1.ca.comcast.net [67.180.195.167]) by mx.google.com with ESMTPS id 15sm1438274yxh.58.2010.04.18.21.22.07 (version=TLSv1/SSLv3 cipher=RC4-MD5); Sun, 18 Apr 2010 21:22:08 -0700 (PDT)
From: Dick Hardt <dick.hardt@gmail.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Date: Sun, 18 Apr 2010 21:22:04 -0700
Message-Id: <2997F829-4755-44A8-ADD5-643BCE25AA61@gmail.com>
To: OAuth WG <oauth@ietf.org>
Mime-Version: 1.0 (Apple Message framework v1078)
X-Mailer: Apple Mail (2.1078)
Subject: [OAUTH-WG] Clarification: authorization server matching of redirect URI
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 19 Apr 2010 04:22:34 -0000

Some AS will match part of the URI to what was registered, some require everything up to the start of a query. The spec needs to clarify how much of the URI needs to be matched, or state it is AS specified.

-- Dick