[OAUTH-WG] Requesting mutliple scope, but user authorizes not all

Martin Ley <m.ley@tarent.de> Fri, 26 November 2010 08:40 UTC

Message-ID: <20101126094122.53764oqlukyiow4y@ugs.tarent.de>
Date: Fri, 26 Nov 2010 09:41:22 +0100
From: Martin Ley <m.ley@tarent.de>
To: oauth@ietf.org
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"; DelSp="Yes"; format="flowed"
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
User-Agent: Dynamic Internet Messaging Program (DIMP) H3 (1.1.4)
Subject: [OAUTH-WG] Requesting mutliple scope, but user authorizes not all
Precedence: list

Dear list,

perhaps I've overread it in the specification or it was not explicit  
about my required scenario:


The Web-Server-Flow is used. An application requests data about the  
user. The scopes are dateofbirth,isover18,address. Now the user is  
forwarded to the authorization server to identify and authenticate and  
give permissions to the applications. The user decides to give only  
permission for the isover18 scope but not dateofbirth and address.

How would the application be notified about the granted scopes and the  
not granted scopes?

Best regards

Martin


-- 
tarent Gesellschaft für Softwareentwicklung und IT-Beratung mbH
Geschäftsführer: Boris Esser, Elmar Geese
HRB AG Bonn 5168 - USt-ID (VAT): DE122264941

Heilsbachstraße 24, 53123 Bonn,   Telefon: +49 228 52675-0
Thiemannstraße 36a, 12059 Berlin, Telefon: +49 30 5682943-30
Internet: http://www.tarent.de/   Telefax: +49 228 52675-25

[OAUTH-WG] Requesting mutliple scope, but user au… Martin Ley
Re: [OAUTH-WG] Requesting mutliple scope, but use… Eran Hammer-Lahav
Re: [OAUTH-WG] Requesting mutliple scope, but use… Igor Faynberg
Re: [OAUTH-WG] Requesting mutliple scope, but use… Nat Sakimura
Re: [OAUTH-WG] Requesting mutliple scope, but use… Igor Faynberg
Re: [OAUTH-WG] Requesting mutliple scope, but use… David Primmer
Re: [OAUTH-WG] Requesting mutliple scope, but use… Justin Richer