On 2011-10-18 17:38, Eran Hammer-Lahav wrote:
Space is allowed inside a quoted string and is already not allowed inside each
scope string.
EHL
...
a) yes.
b) well:
The value of the scope parameter is expressed as a list of space-
delimited, case sensitive strings. The strings are defined by the
authorization server. If the value contains multiple space-delimited
strings, their order does not matter, and each string adds an
additional access range to the requested scope.
That certainly implies that you can't have a space inside a token, but
it could be clearer.
Optimally, state the character repertoire precisely:
scopetokenchar = %x21 / %x23-5B / %x5D-7E
; HTTPbis P1 qdtext except whitespace, restricted to US-ASCII
?
Best regards, Julian
_______________________________________________
OAuth mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/oauth
