Re: [OAUTH-WG] Draft -09

Eran Hammer-Lahav <eran@hueniverse.com> Wed, 30 June 2010 15:40 UTC

From: Eran Hammer-Lahav <eran@hueniverse.com>
To: "OAuth WG (oauth@ietf.org)" <oauth@ietf.org>
Date: Wed, 30 Jun 2010 08:41:01 -0700
Thread-Topic: Draft -09
Thread-Index: AcsXVmRrsO6Hfs/LQgKeY82EBJQ0KwAA86rwAEPvUvA=
Message-ID: <90C41DD21FB7C64BB94121FBBC2E72343B3ED4C088@P3PW5EX1MB01.EX1.SECURESERVER.NET>
References: <90C41DD21FB7C64BB94121FBBC2E72343B3ED4BCCC@P3PW5EX1MB01.EX1.SECURESERVER.NET> <90C41DD21FB7C64BB94121FBBC2E72343B3ED4BCCE@P3PW5EX1MB01.EX1.SECURESERVER.NET>
In-Reply-To: <90C41DD21FB7C64BB94121FBBC2E72343B3ED4BCCE@P3PW5EX1MB01.EX1.SECURESERVER.NET>
Accept-Language: en-US
Content-Language: en-US
acceptlanguage: en-US
Content-Type: multipart/alternative; boundary="_000_90C41DD21FB7C64BB94121FBBC2E72343B3ED4C088P3PW5EX1MB01E_"
MIME-Version: 1.0
Subject: Re: [OAUTH-WG] Draft -09
Precedence: list

The SharedCopy experiment is working great (at least for me). However, they have a bug where the sticky notes move so please always highlight the text in addition to leaving a note.

EHL

From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf Of Eran Hammer-Lahav
Sent: Tuesday, June 29, 2010 12:11 AM
To: OAuth WG (oauth@ietf.org)
Subject: Re: [OAUTH-WG] Draft -09

For editorial feedback, I am going to try something new and use SharedCopy.com (no install required).

Try it out at: http://r6.sharedcopy.com/6bnqq8v

If this doesn't work, I'll let people know and cancel it.

EHL

From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf Of Eran Hammer-Lahav
Sent: Monday, June 28, 2010 11:56 PM
To: OAuth WG (oauth@ietf.org)
Subject: [OAUTH-WG] Draft -09

Draft -09 is now posted. Main changes include:

o  Fixed typos, editorial changes. Thanks to Dick for his useful feedback.
o  Added token expiration example.
o  Added scope parameter to end-user authorization endpoint response and WWW-Authenticate header.
o  Added note about parameters with empty values (same as omitted).
o  Changed parameter values to use '-' instead of '_'.  Parameter names still use '_'.
o  Changed authorization endpoint client type to response type with values: code, token, or both.
o  Complete cleanup of error codes.  Added support for error description and URI.
o  Add initial extensibility support.

Draft -09 represents what I consider to be the first feature complete proposal. While it still needs much work, it has notes for open issues and missing parts. I plan to give people 2 weeks to review and provide extensive feedback, and will post one more draft before the 7/12 cutoff date for the meeting.

My goal is to collect enough feedback to declare the next draft (-10) stable for wider implementation. If you were waiting for a stable draft to study and provide extensive feedback, this is the draft! When giving feedback pretend this is your last chance to making a significant contribution or changes to the core specification.

Please submit feedback by 7/9.

When submitting feedback please start a new thread for each item. Editorial commentary can be collected in one post (and please send to the list, even if it is minor, because I tend to get the same typo correction many times).

Thanks,

EHL

[OAUTH-WG] Draft -09 Eran Hammer-Lahav
Re: [OAUTH-WG] Draft -09 Eran Hammer-Lahav
Re: [OAUTH-WG] Draft -09 Pelle Braendgaard
Re: [OAUTH-WG] Draft -09 Eran Hammer-Lahav
Re: [OAUTH-WG] Draft -09 Torsten Lodderstedt
Re: [OAUTH-WG] Draft -09 Eran Hammer-Lahav
Re: [OAUTH-WG] Draft -09 Eran Hammer-Lahav
Re: [OAUTH-WG] Draft -09 Torsten Lodderstedt
Re: [OAUTH-WG] Draft -09 Eran Hammer-Lahav
Re: [OAUTH-WG] Draft -09 Eran Hammer-Lahav