The IETF OAuth working group decided at IETF 97 to proceed with standardizing the OAuth Authorization Server Metadata specification, which is already in widespread use, and to stop work on the OAuth Protected Resource Metadata specification, which is more speculative. Accordingly, a new version of the AS Metadata spec has been published that removes its dependencies upon the Resource Metadata spec. In particular, the "protected_resources" AS Metadata element has been removed. Its definition has been moved to the Resource Metadata spec for archival purposes. Note that the Resource Metadata specification authors intend to let it expire unless the working group decides to resume work on it at some point in the future.
The specifications are available at: * https://tools.ietf.org/html/draft-ietf-oauth-discovery-05 * https://tools.ietf.org/html/draft-jones-oauth-resource-metadata-01 HTML-formatted versions are also available at: * http://self-issued.info/docs/draft-ietf-oauth-discovery-05.html * http://self-issued.info/docs/draft-jones-oauth-resource-metadata-01.html -- Mike P.S. This notice was also posted at http://self-issued.info/?p=1629 and as @selfissued<https://twitter.com/selfissued>.
_______________________________________________ OAuth mailing list [email protected] https://www.ietf.org/mailman/listinfo/oauth
