Panel Finding: OAuth Implicit Flow

solid / authentication-panel

GitHub repository for the Solid Authentication Panel

MIT License

11 stars 15 forks source link

Panel Finding: OAuth Implicit Flow #24

Closed elf-pavlik closed 4 years ago

elf-pavlik commented 4 years ago

Proposal to resolve #14

elf-pavlik commented 4 years ago

During today's call we discussed need to address clients using Device Code Grant. In that case we can't have just MUST Authorization Code + PKCE for all clients. We may also need to provide guidance on Device Code Grant for authorization servers.

dmitrizagidulin commented 4 years ago

+1 to emphasizing a SHOULD (instead of a MUST for all clients)

EndlessTrax commented 4 years ago

Can we close this PR, @elf-pavlik as it pertains to the old version of this document?