[OAUTH-WG] a question on authorization to resource and scope in request
zhou.sujing@zte.com.cn Fri, 10 August 2012 06:53 UTC
Return-Path: <zhou.sujing@zte.com.cn>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 35CCC11E80FF for <oauth@ietfa.amsl.com>; Thu, 9 Aug 2012 23:53:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -98.219
X-Spam-Level:
X-Spam-Status: No, score=-98.219 tagged_above=-999 required=5 tests=[AWL=3.619, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_DOUBLE_IP_LOOSE=0.76, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UmDrNWZ+M6+r for <oauth@ietfa.amsl.com>; Thu, 9 Aug 2012 23:53:52 -0700 (PDT)
Received: from mx5.zte.com.cn (mx6.zte.com.cn [95.130.199.165]) by ietfa.amsl.com (Postfix) with ESMTP id D405B11E80E6 for <oauth@ietf.org>; Thu, 9 Aug 2012 23:53:51 -0700 (PDT)
Received: from [10.30.17.99] by mx5.zte.com.cn with surfront esmtp id 10723546696947; Fri, 10 Aug 2012 14:41:10 +0800 (CST)
Received: from [10.30.3.21] by [192.168.168.15] with StormMail ESMTP id 28963.546696947; Fri, 10 Aug 2012 14:53:47 +0800 (CST)
Received: from notes_smtp.zte.com.cn ([10.30.1.239]) by mse02.zte.com.cn with ESMTP id q7A6rTLP084990 for <oauth@ietf.org>; Fri, 10 Aug 2012 14:53:29 +0800 (GMT-8) (envelope-from zhou.sujing@zte.com.cn)
To: "oauth@ietf.org" <oauth@ietf.org>
MIME-Version: 1.0
X-Mailer: Lotus Notes Release 6.5.6 March 06, 2007
Message-ID: <OFD1C31C20.08E26086-ON48257A56.002562A1-48257A56.0025E9A1@zte.com.cn>
From: zhou.sujing@zte.com.cn
Date: Fri, 10 Aug 2012 14:53:15 +0800
X-MIMETrack: Serialize by Router on notes_smtp/zte_ltd(Release 8.5.3FP1 HF212|May 23, 2012) at 2012-08-10 14:53:23, Serialize complete at 2012-08-10 14:53:23
Content-Type: multipart/alternative; boundary="=_alternative 0025E9A048257A56_="
X-MAIL: mse02.zte.com.cn q7A6rTLP084990
Subject: [OAUTH-WG] a question on authorization to resource and scope in request
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 10 Aug 2012 06:53:53 -0000
Hi, all I wonder how an access token is bound with the required resource item, I cann't see any field specifying the requested resource in request for authorization token and access token. Is "scope" relevant with this? Regards~~~ -Sujing Zhou
- [OAUTH-WG] a question on authorization to resourc… zhou.sujing
- Re: [OAUTH-WG] a question on authorization to res… Håvard Geithus
- Re: [OAUTH-WG] a question on authorization to res… Håvard Geithus