[Openid-specs-ab] Lite Draft 8

[Allen Tom]

The scopes that the client is asking for could be bound to the client_id.
This assumes that the RP pre-registered with the OP.

That being said, I think it's probably easier for client developers if
they're able to dynamically specify the scopes that they want.

Allen


On Wed, Aug 17, 2011 at 5:19 PM, John Bradley <ve7jtb at ve7jtb.com> wrote:

> Yes but the question is how you ask for authorization.
>
> If there is only one scope then you can't ask for a subset.  At least
> Facebook dosen't want to give email by default.
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20110817/5d3de9f6/attachment.html>