[Openid-specs-ab] Please review - Clarified when the "http" scheme can and can not be used in "redirect_uri" values.
Mike Jones
Michael.Jones at microsoft.com
Wed Feb 27 07:51:25 UTC 2013
In particular, I clarified that the "http" scheme MAY be used by Clients when the code grant type is used, and MAY NOT be used otherwise (other than by native clients, which can use http://localhost/ redirect_uri values).
The checkin was http://hg.openid.net/connect/commits/077b4b317ffedee26d3d391b36bf72f8720a60b9. Or view the redirect_uri definitions in Messages, Basic, and Implicit at http://openid.bitbucket.org/.
Thanks,
-- Mike
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20130227/1ec16823/attachment.html>
More information about the Openid-specs-ab
mailing list