Re: [OAUTH-WG] [draft-ietf-oauth] Removed a repeated sentence in 3.1.2.2 (#1)

Eran Hammer-Lahav <eran@hueniverse.com> Mon, 15 August 2011 06:49 UTC

From: Eran Hammer-Lahav <eran@hueniverse.com>
To: OAuth WG <oauth@ietf.org>
Date: Sun, 14 Aug 2011 23:49:20 -0700
Thread-Topic: [draft-ietf-oauth] Removed a repeated sentence in 3.1.2.2 (#1)
Thread-Index: Acxafv+73OTdUKHPTvCfaV3kPllGAAAmFCag
Message-ID: <90C41DD21FB7C64BB94121FBBC2E7234502498CDDD@P3PW5EX1MB01.EX1.SECURESERVER.NET>
References: <hueniverse/draft-ietf-oauth/pull/1@github.com>
In-Reply-To: <hueniverse/draft-ietf-oauth/pull/1@github.com>
Accept-Language: en-US
Content-Language: en-US
acceptlanguage: en-US
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Cc: alexbilbie <reply+i-1402979-e64eed155dddc31922fd2a2afcf51540a611956a@reply.github.com>
Subject: Re: [OAUTH-WG] [draft-ietf-oauth] Removed a repeated sentence in 3.1.2.2 (#1)
Precedence: list

Received via github:

> -----Original Message-----
> From: alexbilbie [mailto:reply+i-1402979-
> e64eed155dddc31922fd2a2afcf51540a611956a@reply.github.com]
> Sent: Sunday, August 14, 2011 5:38 AM
> To: Eran Hammer-Lahav
> Subject: [draft-ietf-oauth] Removed a repeated sentence in 3.1.2.2 (#1)
> 
> Hello,
> 
> I changed the first paragraph of section 3.1.2.2 from:
> 
>     The authorization server MUST require public clients to register
>     their redirection URI, MUST require all clients to register their
>     redirection URI prior to utilizing the implicit grant type, and
>     SHOULD require all clients to register their redirection URI prior to
>     utilizing the authorization code grant type.
> 
> to:
> 
>     The authorization server MUST require all clients to register their
>     redirection URI prior to utilizing the implicit grant type, and
>     SHOULD require all clients to register their redirection URI prior to
>     utilizing the authorization code grant type.
> 
> I think the phrase "MUST require public clients to register their redirection
> URI" was unnecessary when followed by "MUST require all clients to register
> their redirection URI"

Changed to:

              The authorization server SHOULD require all clients to register their redirection URI
              prior to using the authorization endpoint, and MUST require the following clients to
              register their redirection URI:

              o    Public clients.
              o    Confidential clients utilizing the implicit grant type.

EHL

Re: [OAUTH-WG] [draft-ietf-oauth] Removed a repea… Eran Hammer-Lahav