Please see my e-mail to this list from Oct 27th with the subject "OAuth v2
Authorization Header Credentials". It outlines several major problems in the
parsing of the Authorization header that were in OAuth v2 draft 10, and are
still present in this new bearer draft.
That e-mail also proposes a solution, and a corrected ABNF grammar.
I can resend if people would like.
- Mark Lentczner
[email protected]
_______________________________________________
OAuth mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/oauth