This makes sense. I think this requires changing the 'basic client credentials' to 'client password credentials'.
While not necessary, we might want to change 'client_secret' to 'client_password' to be more explicit and descriptive (since 'secret' can be many things, but we are using it in an explicitly limited way - symmetric password). EHL On 7/8/10 11:37 PM, "Brian Eaton" <[email protected]> wrote: "basic credentials". This makes sense if you've read the BNF in the http basic auth spec, and is otherwise weird. I think everywhere that refers in prose to the username and password should call them "username and password" or "password credentials". Let's not use "basic credentials" at all. We could use "basic-credentials" in BNF that refers to the exact format used by the HTTP spec, but otherwise let's skip it.
_______________________________________________ OAuth mailing list [email protected] https://www.ietf.org/mailman/listinfo/oauth
