Most current version of OpenID / OAuth hybrid spec draft?
Allen Tom
atom at yahoo-inc.com
Wed May 13 04:48:20 UTC 2009
Hi Nat,
Here you go:
http://step2.googlecode.com/svn/spec/openid_oauth_extension/latest/openid_oauth_extension.html
We might need to revise the spec to not support checkid_immediate for
the Hybrid flow, becuase auto-issuing OAuth access tokens is probably a
bad thing, in light of the recent OAuth security issue.
Allen
Nat Sakimura wrote:
> Hi.
>
> Where can I find the most current version of OpenID / OAuth hybrid spec draft?
> I would like to look at it to see if I can borrow as much from the
> draft for what I am thinking right now.
>
>
More information about the specs
mailing list