Re: [OAUTH-WG] Draft -07 (major rewrite)

Christian Scholz <cs@comlounge.net> Fri, 11 June 2010 21:24 UTC

Return-Path: <cs@comlounge.net>
X-Original-To: oauth@core3.amsl.com
Delivered-To: oauth@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2C86828C0F4 for <oauth@core3.amsl.com>; Fri, 11 Jun 2010 14:24:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level:
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, J_CHICKENPOX_36=0.6]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id G7JCf2Wu01tN for <oauth@core3.amsl.com>; Fri, 11 Jun 2010 14:24:12 -0700 (PDT)
Received: from post.comlounge.net (post.comlounge.net [85.214.59.142]) by core3.amsl.com (Postfix) with ESMTP id 156FE3A63CB for <oauth@ietf.org>; Fri, 11 Jun 2010 14:24:12 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by post.comlounge.net (Postfix) with ESMTP id C38326F40B4 for <oauth@ietf.org>; Fri, 11 Jun 2010 23:24:13 +0200 (CEST)
Received: from post.comlounge.net ([127.0.0.1]) by localhost (h1346004.stratoserver.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id q89LdGLz0awT for <oauth@ietf.org>; Fri, 11 Jun 2010 23:24:13 +0200 (CEST)
Received: from [192.168.2.113] (p5B3D7469.dip.t-dialin.net [91.61.116.105]) by post.comlounge.net (Postfix) with ESMTPSA id 236716F40AB for <oauth@ietf.org>; Fri, 11 Jun 2010 23:24:11 +0200 (CEST)
Message-ID: <4C12A97A.8020505@comlounge.net>
Date: Fri, 11 Jun 2010 23:24:10 +0200
From: Christian Scholz <cs@comlounge.net>
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; de; rv:1.9.1.9) Gecko/20100317 Lightning/1.0b1 Thunderbird/3.0.4
MIME-Version: 1.0
To: oauth@ietf.org
References: <90C41DD21FB7C64BB94121FBBC2E72343B3EAF76BC@P3PW5EX1MB01.EX1.SECURESERVER.NET> <AANLkTimwF01iyhC7ua35scgMIPqVv3J5d_Z1lHSTXLUo@mail.gmail.com>
In-Reply-To: <AANLkTimwF01iyhC7ua35scgMIPqVv3J5d_Z1lHSTXLUo@mail.gmail.com>
X-Enigmail-Version: 1.0.1
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
Subject: Re: [OAUTH-WG] Draft -07 (major rewrite)
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 11 Jun 2010 21:24:14 -0000

Hi!

Am 11.06.10 22:47, schrieb Marius Scurtescu:
> On Fri, Jun 11, 2010 at 1:11 PM, Eran Hammer-Lahav <eran@hueniverse.com> wrote:
>> Draft -07 represents a major rearrangement of the document. I still have a lot of work to do but wanted to share my progress and get some general feedback. The draft includes a few normative language changes but the main focus is on the document structure and how the architecture is explained.
>>
>> Changes include:
>>
>>   o  Removed device profile.
>>   o  Added verification code support to user-agent flow.
>>   o  Removed multiple formats support, leaving JSON as the only format.
>>   o  Changed assertion "assertion_format" parameter to "assertion_type".
>>   o  Removed "type" parameter from token endpoint.
> 
> It would be really useful if each request had a unique type, now we
> are back to guessing what is requested, like in WRAP.

I am just wondering why having a separate endpoint for this isn't
enough. I would rather map another library call to another endpoint
instead of relying on guessing on the contents. That's why we have
separate endpoints, I guess.

(I might be missing something though)

-- Christian


-- 
Christian Scholz                          Homepage: http://comlounge.net
COM.lounge GmbH                              blog: http://mrtopf.de/blog
Hanbrucher Str. 33                                       Skype: HerrTopf
52064 Aachen                             Video Blog: http://comlounge.tv
Tel: +49 241 400 730 0                           E-Mail cs@comlounge.net
Fax: +49 241 979 00 850                               IRC: MrTopf, Tao_T

Podcasts:
Der OpenWeb-Podcast (http://openwebpodcast.de)
Data Without Borders (http://datawithoutborders.net)
Politisches: http://politfunk.de/
Technical: http://comlounge.tv/