"Parameters not explicitly included in the request MUST be excluded from the signature base string (e.g. the "oauth_version" parameter when omitted)."
It stopped short of making omitting the oauth_version a SHOULD. EHL > -----Original Message----- > From: Peter Saint-Andre [mailto:[email protected]] > Sent: Thursday, November 19, 2009 8:14 AM > To: [email protected] > Subject: Re: [oauth] oauth_version parameter > > On 11/19/09 8:13 AM, Eran Hammer-Lahav wrote: > > The version parameter refers to the signature process which has not > > changed. It is best to simply omit the parameter on the client, and > > only include it in the signature on the server if it is received. > > It would be good to make sure this is clear in draft-hammer-oauth. :) > > Peter > > -- > Peter Saint-Andre > https://stpeter.im/ > -- You received this message because you are subscribed to the Google Groups "OAuth" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/oauth?hl=.
