Justin Richer said: "Since all formats are optional,..." No they aren't. draft-ietf-oauth-v2-bearer-03 says "Resource servers MUST accept [the Authorization header], and MAY support [body & query parameters]"
-- James Manger _______________________________________________ OAuth mailing list [email protected] https://www.ietf.org/mailman/listinfo/oauth
