Most current version of OpenID / OAuth hybrid spec draft?

Allen Tom atom at yahoo-inc.com
Wed May 13 04:48:20 UTC 2009


Hi Nat,

Here you go:

http://step2.googlecode.com/svn/spec/openid_oauth_extension/latest/openid_oauth_extension.html

We might need to revise the spec to not support checkid_immediate for 
the Hybrid flow, becuase auto-issuing OAuth access tokens is probably a 
bad thing, in light of the recent OAuth security issue.

Allen





Nat Sakimura wrote:
> Hi.
>
> Where can I find the most current version of OpenID / OAuth hybrid spec draft?
> I would like to look at it to see if I can borrow as much from the
> draft for what I am thinking right now.
>
>   




More information about the specs mailing list