Re: [Wish] Authentication for resource url

[Adam Roach <[e-mail]>]

On 9/15/21 13:29, Juliusz Chroboczek wrote:
>> I know my message was long, and I apologize for its length, but did you
>> make it to the last paragraph? It was aimed at your use case.
> Yes, I did.  You're suggesting a deterministic procedure to map
> a username/password to a bearer token, and arguing that it doesn't need to
> be normatively definded since it can be communicated out-of-band to the
> users.


I'm saying that, /for your server/, that's a choice you can make, and it 
works for your use case. There's going to need to be some kind of 
out-of-band communication to get them the WISH URL anyway, so adding 
that information on doesn't make anything more complicated.

To be clear, I wouldn't expect any other servers to use that scheme.

/a