[Openid-specs-ab] Summary of WG meeting

[Breno de Medeiros]

BCC:openid-specs-ab at lists.openid.net

We also discussed the nature of the UserInfoEndpoint and how to deal
with verifiable/authoritative claims. I already started a discussion
on that on a separate thread.

On Mon, Mar 14, 2011 at 17:37, Breno de Medeiros <breno at google.com> wrote:
> Note: openid-specs-ab is on BCC: because it's a closed post group.
>
> Today we discussed two items for the meeting:
>
> - How to obtain 'cookies', i.e., session tokens in addition to other
> OAuth2 tokens
>
> I will send a second email with more detailed discussion on this topic
>
> - How to perform discovery
>
> Mike Jones noted that his write-up of the discovery spec did not match
> Paul Tarjan's request, due to a misunderstanding. We then discussed
> Paul Tarjan's proposal, which we understood to mean: One different
> standard discovery location for each endpoint and fetching the
> standard discovery location redirects to the endpoint. There were
> concerns about limitations of this approach, e.g., how to perform
> exploration of supported extensions.  Mike Jones will lead discussion
> on the options regarding discovery.
>
> --
> --Breno
>