On Wed, Jul 7, 2010 at 4:51 PM, Chuck Mortimore <[email protected]> wrote: > This thread forced a great deal on internal discussion today, and we > actually do have some more immediate use-cases where we'll require > client_id with the assertion flow > > I support leaving it as optional
Can you describe the additional use cases? And do they require refresh tokens as well? I'm really worried about jamming multiple use cases into a single profile, and then being surprised when: a) that profile is suboptimal for all of the use cases b) developers are hugely confused by it Cheers, Brian _______________________________________________ OAuth mailing list [email protected] https://www.ietf.org/mailman/listinfo/oauth
