Re: [OAUTH-WG] Adding machine readable errors to SPOP?

2014-11-14 Thread Brian Campbell
I struggle to see the value in adding more fine grained machine readable error messages for this. Do we really want clients to try and negotiate the code_challenge_method using browser redirects? Especially in light of the fact that we'll likely also be discouraging AS's from redirecting on some

Re: [OAUTH-WG] Adding machine readable errors to SPOP?

2014-11-14 Thread Nat Sakimura
editorhatoffI find not much, if any. /editorhatoff On Fri, Nov 14, 2014 at 06:27 Brian Campbell bcampb...@pingidentity.com wrote: I struggle to see the value in adding more fine grained machine readable error messages for this. Do we really want clients to try and negotiate the

Re: [OAUTH-WG] Adding machine readable errors to SPOP?

2014-11-14 Thread Nat Sakimura
That pretty much was the conclusion we reached. I believe that it was what the F2F room inclined to. So, for -04, we added a section on error response but it doesn't have those granular errors. On Fri, Nov 14, 2014 at 07:07 John Bradley ve7...@ve7jtb.com wrote: hatoff Nat and I discussed it

Re: [OAUTH-WG] Adding machine readable errors to SPOP?

2014-11-14 Thread Bill Mills
I sent some feedback on that section in a different message on list. On Friday, November 14, 2014 12:41 PM, Nat Sakimura sakim...@gmail.com wrote: That pretty much was the conclusion we reached. I believe that it was what the F2F room inclined to. So, for -04, we added a section on

Re: [OAUTH-WG] Adding machine readable errors to SPOP?

2014-11-14 Thread Nat Sakimura
Thanks. I will dig it up. On Fri, Nov 14, 2014 at 10:54 Bill Mills wmills_92...@yahoo.com wrote: I sent some feedback on that section in a different message on list. On Friday, November 14, 2014 12:41 PM, Nat Sakimura sakim...@gmail.com wrote: That pretty much was the conclusion we

[OAUTH-WG] Adding machine readable errors to SPOP?

2014-11-12 Thread Nat Sakimura
As discussed at F2F today at IETF 91 OAuth WG, there has been some request to have a more fine grained machine readable error messages. Currently, it only returns the error defined in RFC6749 and any more details is supposed to be returned in error_descripton and error_uri. So, I came up with

Re: [OAUTH-WG] Adding machine readable errors to SPOP?

2014-11-12 Thread Mike Jones
). -- Mike From: OAuth [mailto:oauth-boun...@ietf.org] On Behalf Of Nat Sakimura Sent: Wednesday, November 12, 2014 10:49 AM To: oauth Subject: [OAUTH-WG] Adding machine readable errors to SPOP? As discussed at F2F today at IETF 91 OAuth WG, there has been some request

Re: [OAUTH-WG] Adding machine readable errors to SPOP?

2014-11-12 Thread Nat Sakimura
[mailto:oauth-boun...@ietf.org] *On Behalf Of *Nat Sakimura *Sent:* Wednesday, November 12, 2014 10:49 AM *To:* oauth *Subject:* [OAUTH-WG] Adding machine readable errors to SPOP? As discussed at F2F today at IETF 91 OAuth WG, there has been some request to have a more fine grained machine readable

Re: [OAUTH-WG] Adding machine readable errors to SPOP?

2014-11-12 Thread Bill Mills
: [OAUTH-WG] Adding machine readable errors to SPOP? As discussed at F2F today at IETF 91 OAuth WG, there has been some request to have a more fine grained machine readable error messages.  Currently, it only returns the error defined in RFC6749 and any more details is supposed to be returned