mozilla / fxa-oauth-server

OAuth server for Firefox Accounts
48 stars 40 forks source link

feat(oauth): Implement incremental authorization features. #577

Closed eoger closed 6 years ago

eoger commented 6 years ago

Fixes #553

This is a first draft that probably needs more work.

shane-tomlinson commented 6 years ago

FWIW, here's the proposed OAuth 2.0 spec for Incremental Authorization - https://tools.ietf.org/html/draft-ietf-oauth-incremental-authz-00

eoger commented 6 years ago

Do you have plans to start consuming this from the fxa-rust-client in the short term?

I wonder if this also needs a PR on the content-server side: "You have already given the follow permissions, do you want to add these?"

shane-tomlinson commented 6 years ago

I wonder if this also needs a PR on the content-server side:

We never built the frontend to handle incremental auth, so yup, the content server will need an update too. You've been so prolific lately I just assumed it'd be forthcoming. ;)