Hi Nat,

Here you go:

http://step2.googlecode.com/svn/spec/openid_oauth_extension/latest/openid_oauth_extension.html

We might need to revise the spec to not support checkid_immediate for the Hybrid flow, becuase auto-issuing OAuth access tokens is probably a bad thing, in light of the recent OAuth security issue.

Allen





Nat Sakimura wrote:
Hi.

Where can I find the most current version of OpenID / OAuth hybrid spec draft?
I would like to look at it to see if I can borrow as much from the
draft for what I am thinking right now.


_______________________________________________
specs mailing list
specs@openid.net
http://openid.net/mailman/listinfo/specs

Reply via email to