Send email to list about Device Flow / PAR / First Party apps commonality

[aaronpk]

Send email to list about defining a new "OAuth POST Request Framework" that First Party Apps would extend. The framework defines:

• request_type={extension-defined}
• OAuth input parameters (copy language from PAR)
• Client authentication, etc
• Response is defined by extensions

Registry of:

• request_type
• Input parameters
• Response body parameters

Why not extend PAR?

• PAR explicitly defines the response body, we need to change that.
• PAR also defines using the request_uri at the authorize endpoint, we don't need that.

[aaronpk]

Sent: https://mailarchive.ietf.org/arch/msg/oauth/Q8O7ITOyAsx_wlgVctsltcheaNM/