search

aaronpk / oauth-first-party-apps

https://datatracker.ietf.org/doc/html/draft-parecki-oauth-first-party-apps
Other
11 stars 8 forks source link

Should we "update" RFC6749 #79

Open yaronf opened 6 months ago

yaronf commented 6 months ago

Sec. 4.2: if we're adding an error code (=behavior) to the Token endpoint, I guess the document should Update RFC6749. We're also removing a REQUIRED parameter, redirect_uri.

aaronpk commented 5 months ago

It's a common misconception that redirect_uri is a required parameter on the token endpoint. It's actually only required IF a redirect_uri was present in the authorization request, which it would not be in this specification.

yaronf commented 5 months ago

Fair enough (and my bad). But what about the new error code?