[OAUTH-WG] oauth - Requested sessions have been scheduled for IETF 97

2016-10-21 Thread "IETF Secretariat"
Dear Hannes Tschofenig, The session(s) that you have requested have been scheduled. Below is the scheduled session information followed by the original request. oauth Session 1 (1:30:00) Wednesday, Afternoon Session II 1520-1620 Room Name: Studio 3 size: 80

Re: [OAUTH-WG] Device Flow: Alternative to Polling

2016-10-21 Thread William Denniss
We've been operating with polling for a while and handle a decent amount of traffic (the YouTube TV app uses it), the polling gets the job done. The simplicity of the protocol definitely helps when used on constrained devices. I like the idea of adding HTTP/2 based long-poll as an optional

Re: [OAUTH-WG] Fwd: New Version Notification for draft-campbell-oauth-tls-client-auth-00.txt

2016-10-21 Thread Brian Campbell
I did consider something like that but stopped short of putting it in the -00 document. I'm not convinced that some metadata around it would really contribute to interop one way or the other. I also wanted to get the basic concept written down before going too far into the weeds. But I'd be open

Re: [OAUTH-WG] Device Flow: Alternative to Polling

2016-10-21 Thread Aaron Parecki
Part of the beauty of the current device flow spec is that it's so simple to support. Keeping that simplicity is crucial especially for this, since this flow is used by a variety of devices that often do not have higher level stacks. I would love to hear from someone who has experience with

[OAUTH-WG] Device Flow: Alternative to Polling

2016-10-21 Thread Hannes Tschofenig
Hi all, the device flow document outlines the case when an OAuth interaction gets "outsourced" to a separate device in order to allow user authentication and collecting the consent. The exchange is described in Section 1 of https://tools.ietf.org/html/draft-ietf-oauth-device-flow-03. Here is

[OAUTH-WG] Device Flow Open Issues

2016-10-21 Thread Hannes Tschofenig
Hi all, at the last IETF meeting we got lots of good feedback regarding the device flow document. Here is the link to the device flow draft: https://tools.ietf.org/html/draft-ietf-oauth-device-flow-03 Four main issues got captured in the minutes, namely 1) Alternative to polling 2) Missing

[OAUTH-WG] Metadata about Authorization Servers

2016-10-21 Thread Hannes Tschofenig
Hi all, I need the feedback from the group on one of our working group items, namely https://tools.ietf.org/html/draft-ietf-oauth-discovery-04 Despite the name (discovery) the document really only describes configuration information about an authorization server in a machine readable form, which

[OAUTH-WG] I-D Action: draft-ietf-oauth-native-apps-05.txt

2016-10-21 Thread internet-drafts
A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Web Authorization Protocol of the IETF. Title : OAuth 2.0 for Native Apps Authors : William Denniss John Bradley