Re: [OAUTH-WG] Client cannot specify the token type it needs

William Mills <wmills_92105@yahoo.com> Mon, 21 January 2013 05:08 UTC

Return-Path: <wmills_92105@yahoo.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A9EA221F8800 for <oauth@ietfa.amsl.com>; Sun, 20 Jan 2013 21:08:46 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.002
X-Spam-Level:
X-Spam-Status: No, score=0.002 tagged_above=-999 required=5 tests=[BAYES_50=0.001, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id X0zc9yzz2ARW for <oauth@ietfa.amsl.com>; Sun, 20 Jan 2013 21:08:45 -0800 (PST)
Received: from nm22-vm0.bullet.mail.ne1.yahoo.com (nm22-vm0.bullet.mail.ne1.yahoo.com [98.138.91.60]) by ietfa.amsl.com (Postfix) with ESMTP id 0D6A121F8620 for <oauth@ietf.org>; Sun, 20 Jan 2013 21:08:44 -0800 (PST)
Received: from [98.138.226.177] by nm22.bullet.mail.ne1.yahoo.com with NNFMP; 21 Jan 2013 05:08:40 -0000
Received: from [98.138.87.7] by tm12.bullet.mail.ne1.yahoo.com with NNFMP; 21 Jan 2013 05:08:40 -0000
Received: from [127.0.0.1] by omp1007.mail.ne1.yahoo.com with NNFMP; 21 Jan 2013 05:08:40 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 285021.32258.bm@omp1007.mail.ne1.yahoo.com
Received: (qmail 57029 invoked by uid 60001); 21 Jan 2013 05:08:39 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1358744919; bh=8FmLJP+q3B7XyrKUxAoOz3ultDKbDtShTECW7YV8ats=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=Fz3vTFYe3xZKUfDNaQDPuUpFNJQnJ7PhicvaLsAjMQzCNpZ2gI7eFkEZA7hJ7itIZHuPxw+aOwrZhiS4D/yMTyPuRfg0Sh/6e8zAJaNNxqTD8m/TKD8EZzVxwiGYMjdVuqYFRRIDrLE8ryEw4TVPA9o07Pii8FR1O9KFW/kS9fs=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=CSEdYXq1nCmn+URvbz89Aw9fLV0yp2LVYvxYBpOc+vIlMUQxg2FgryF7xyh1liMcF0/b3Y3AWw9D5ha31dUPu2L1cY9IVQSo0bUB+6kSe5QjzpTrFY1SRYB/7V2XYIKfhtCU1rI0mN6tsxcqkQOlJqI4gZxHkf9QXFRkzsDVX2k=;
X-YMail-OSG: BOtc7pAVM1mowEGlVIkJyAxlProzFRa2BLPkWLW4FnNKv0M Me9F2UJ6uwRwuMP2JteOuqdJuLtcEQTX.btXRr4ZBnPo7Qsr3GKV2BJxE0Pb fN9brDrNLHhzZfTD7gmSOEQtoH5EZ2Zxelk5g_YzWFnlvgLhCdELPcdsYmCA 3qfSjuPFwAFsC3KltjWJtBX_TrcpUJNaDTLukDbWU.PhjnJs6IKaNwsIw.ij 9hvwWKdRudMnW_y2alf1z7zkQ1evf2GsE0JnM2.Rzj749sDt1VfY.EPOtyHS SjwTo9pC1SsGlqme0GT9HoJwEShqodQTgsoipXi8qrfWshmJZA43koF9rv5W XvBve0FVlUMmDXh4.eBHl9FIDOyMQfM.uX8_xX1i9WE3E6OI_UVAsumgoQjQ bY2XdvFPYl96xOBirz_wKxNJOrHPsVT73RBTDTy1tRwK2cMRgRUmwq5m8d9n aeJMKFK18s5lLYQZHQhxKN1Sczkex2cz3dsCYRsXCFMrvgUPyfWfpGnt66WD .RC2P48JhWSpBPUlCyimxqW9BQYelzeTCBGSOWC79qpxo5zixPnQL4oQuAdw F7AJOrWwT457YXrHPW.7m19Z6_BL1fsHn4n.syA1v9T8Z6Oo7HF.BsnCPJBz M_.qt_MnHOCU0ihZA_EOM
Received: from [99.31.212.42] by web31811.mail.mud.yahoo.com via HTTP; Sun, 20 Jan 2013 21:08:39 PST
X-Rocket-MIMEInfo: 001.001, VGhpcyBpcyB0cnVlLiDCoEl0J3MgcG9zc2libGUgZm9yIHRoZSBBUyB0byB2YXJ5IGl0J3MgYmVoYXZpb3Igb24gc2NvcGUgbmFtZSwgYnV0IGl0J3MgcHJlc3VtZWQgdGhlIEFTIGFuZCBSUyBoYXZlIGFuIGFncmVlbWVudCBvZiB3aGF0IHRva2VuIHR5cGUgaXMgaW4gcGxheS4gwqBMaWtlbHkgYSBnb29kIGV4dGVuc2lvbiB0byB0aGUgc3BlYy4KCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwogRnJvbTogUHJhYmF0aCBTaXJpd2FyZGVuYSA8cHJhYmF0aEB3c28yLmNvbT4KVG86ICJvYXV0aEABMAEBAQE-
X-Mailer: YahooMailWebService/0.8.130.496
References: <CAJV9qO_Jks8UrHpn2+u3p2gS0HZNsMUmeY0aWVd8-BKesnMrsA@mail.gmail.com>
Message-ID: <1358744919.12881.YahooMailNeo@web31811.mail.mud.yahoo.com>
Date: Sun, 20 Jan 2013 21:08:39 -0800
From: William Mills <wmills_92105@yahoo.com>
To: Prabath Siriwardena <prabath@wso2.com>, "oauth@ietf.org WG" <oauth@ietf.org>
In-Reply-To: <CAJV9qO_Jks8UrHpn2+u3p2gS0HZNsMUmeY0aWVd8-BKesnMrsA@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="764183289-1492950284-1358744919=:12881"
Subject: Re: [OAUTH-WG] Client cannot specify the token type it needs
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: William Mills <wmills_92105@yahoo.com>
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 21 Jan 2013 05:08:46 -0000

This is true.  It's possible for the AS to vary it's behavior on scope name, but it's presumed the AS and RS have an agreement of what token type is in play.  Likely a good extension to the spec.


________________________________
 From: Prabath Siriwardena <prabath@wso2.com>
To: "oauth@ietf.org WG" <oauth@ietf.org> 
Sent: Sunday, January 20, 2013 7:28 PM
Subject: [OAUTH-WG] Client cannot specify the token type it needs
 

Although token type is extensible according to the OAuth core specification - it is fully governed by the Authorization Server.

There can be a case where a single AS supports multiple token types based on client request.

But currently we don't have a way the client can specify (or at least suggest) which token type it needs in the OAuth access token request ?

Is this behavior intentional ? or am I missing something...


Thanks & Regards,
Prabath

Mobile : +94 71 809 6732 

http://blog.facilelogin.com
http://RampartFAQ.com
_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth