The syntax in HTTPbis is:
credentials = auth-scheme [ 1*SP ( b64token / #auth-param ) ]
The syntax in Bearer 09 is:
credentials = "Bearer" 1*SP ( b64token / #auth-param )
As this conforms to HTTPbis, I don't see a problem. I think HTTPbis and Bearer
are both fine as-is.
-- Mike
-----Original Message-----
From: Julian Reschke [mailto:[email protected]]
Sent: Wednesday, October 12, 2011 7:52 AM
To: Mike Jones
Cc: Manger, James H; [email protected]
Subject: Re: [OAUTH-WG] draft-ietf-oauth-v2-bearer-08.txt WGLC comments
On 2011-10-12 16:32, Mike Jones wrote:
> Draft 09 allows either b64token or auth-params. Unless there's a working
> group consensus that this must change, both syntax options will be supported.
>
> -- Mike
> ...
Mike,
that doesn't work. The restriction in HTTPbis is there because it's necessary
so a recipient can parse a header field that contains multiple, comma-separated
challenges.
If you think that HTTPbis is wrong here please come over to the HTTPbis mailing
list and argue your point.
Best regards, Julian
_______________________________________________
OAuth mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/oauth
