On 5/3/09 4:06 AM, Eran Hammer-Lahav wrote:
> We seem to be spending a lot of time on the question of how providers
> supporting both flows can tell which flow is being used. If they
> simply offer a new set of 3 endpoints: request token, authorize, and
> access token, this entire problem goes away. It also removed the need
> to make the oauth_callback mandatory in the new flow, or use literal
> strings to indicate out-of-band.
/v1.0/{request,authorize,access}
/v1.1/{request,authorize,access}
Look at that. Version'ed URLs for endpoints. OMG BREAK THE WEB. :-P
--
Dossy Shiobara | [email protected] | http://dossy.org/
Panoptic Computer Network | http://panoptic.com/
"He realized the fastest way to change is to laugh at your own
folly -- then you can let go and quickly move on." (p. 70)
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"OAuth" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [email protected]
For more options, visit this group at http://groups.google.com/group/oauth?hl=en
-~----------~----~----~----~------~----~------~--~---
