IETF Logo Mail Archive

[OAUTH-WG] Identifying OAuth 2.0 vs 1.0 requests

Paul Lindner <lindner@inuus.com> Thu, 10 June 2010 15:24 UTC

Return-Path: <lindner@inuus.com>
X-Original-To: oauth@core3.amsl.com
Delivered-To: oauth@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 04E5F3A69E8 for <oauth@core3.amsl.com>; Thu, 10 Jun 2010 08:24:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.624
X-Spam-Level:
X-Spam-Status: No, score=0.624 tagged_above=-999 required=5 tests=[BAYES_50=0.001, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bJuW2UK9k7Pn for <oauth@core3.amsl.com>; Thu, 10 Jun 2010 08:24:01 -0700 (PDT)
Received: from mail-gw0-f44.google.com (mail-gw0-f44.google.com [74.125.83.44]) by core3.amsl.com (Postfix) with ESMTP id 35DAE3A6983 for <oauth@ietf.org>; Thu, 10 Jun 2010 08:24:00 -0700 (PDT)
Received: by gwj16 with SMTP id 16so14312gwj.31 for <oauth@ietf.org>; Thu, 10 Jun 2010 08:24:00 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.91.164.1 with SMTP id r1mr691296ago.112.1276183440310; Thu, 10 Jun 2010 08:24:00 -0700 (PDT)
Received: by 10.90.30.11 with HTTP; Thu, 10 Jun 2010 08:24:00 -0700 (PDT)
Date: Thu, 10 Jun 2010 08:24:00 -0700
Message-ID: <AANLkTilcANtf9WsFh4jJPUBkbCu5x2doTMQEr4_h_Rys@mail.gmail.com>
From: Paul Lindner <lindner@inuus.com>
To: "OAuth WG (oauth@ietf.org)" <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="001485f6d610a0c4320488ae9cca"
Subject: [OAUTH-WG] Identifying OAuth 2.0 vs 1.0 requests
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 10 Jun 2010 15:24:02 -0000

Hi,

As I've been working through our oauth2 implementation I've noticed that
it's not easy to disambiguate OAuth 1.0a vs 2.0 API calls based on the
request parameters alone.   Based on some investigative at the Shindig
project it appears that the only standard way to to determine 1.0a vs 2.0 is
by checking for the oauth_signature_method parameter.  More info here:

https://issues.apache.org/jira/browse/SHINDIG-1361

Has anyone else considered this use case?  How did you solve it?

v2.46.0 | Report a Bug | By Email | System Status