Re: [OAUTH-WG] Token Exchange status and Resource Indicators

2019-05-05 Thread Brian Campbell
On Fri, May 3, 2019 at 9:39 AM Emond Papegaaij wrote: > [...] we are investigating 'OAuth 2.0 > Token Exchange'. [...] However, I noticed that > draft 16 has expired on April 22, 2019. Is this specification still active? > Yeah, it is. A nontrivial amount of stuff came up in IESG balloting on

Re: [OAUTH-WG] draft-fett-oauth-dpop-01 implementation feedback

2019-05-05 Thread Brian Campbell
On Thu, May 2, 2019 at 12:33 AM Paul Querna wrote: > Overall the spec felt functional, though I think the biggest gaps for > a deployment are with the Access Token interactions, but this makes > sense since that seems to be addressed in the future by >