search

michaelrsweet / moauth

Basic OAuth2 client/server implementation.
https://www.msweet.org/moauth
Apache License 2.0
19 stars 3 forks source link

Investigate IndieAuth client ID URIs and redirect URI support #2

Closed michaelrsweet closed 6 years ago

michaelrsweet commented 6 years ago

IndieAuth supports client_id values that are URIs, which allow for automatic "registration" with allowed redirect URIs. In particular, the current spec is focused on network-accessible client_id URIs, but native apps need alternate schemes - could we whitelist client IDs that are valid URI schemes, and allow a redirect URI using that scheme?

michaelrsweet commented 6 years ago

Sticking with OpenID for now.