Please answer this based on actual use cases. When returning parameters
using the redirection URI call, which of these combinations make sense?
| Code | Token | Code & Token
---------+------+-------+--------------
Fragment | a | 1 | 3
Query | 2 | b | c
Split* | n/a | n/a | d
* token in fragment, code in query
Known use cases:
1 - current user-agent flow
2 - current web-server flow
3 - as described by Brian and Naitik
Do you need any of these?
a -
b -
c -
d - current -10 code-and-token proposal
EHL
_______________________________________________
OAuth mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/oauth