Re: [OAUTH-WG] PKCE/SPOP

2015-02-03 Thread John Bradley
OK I fixed that in bitbucket. If I don’t hear back from anyone else I will push that version to the doc tracker this afternoon. John B. On Feb 3, 2015, at 10:40 AM, Brian Campbell bcampb...@pingidentity.com wrote: I went thought appendix B and reproduced the same calculations. Which is

Re: [OAUTH-WG] PKCE/SPOP

2015-02-03 Thread Brian Campbell
I went thought appendix B and reproduced the same calculations. Which is nice. One little nit - to be consitent with the notation defined in §2, the appendix B should have BASE64URL(SHA256(ASCII(code_verifier))) == code_challenge rather than Base64url(SHA256(ASCII(code_verifier ))) ==

[OAUTH-WG] I-D Action: draft-ietf-oauth-spop-08.txt

2015-02-03 Thread internet-drafts
A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Web Authorization Protocol Working Group of the IETF. Title : Proof Key for Code Exchange by OAuth Public Clients Authors : Nat Sakimura