[Openid-specs-ab] Two questions on Native SSO draft

Nat Sakimura nat at sakimura.org
Thu Feb 8 01:18:11 UTC 2024


Hi

(Mainly to George)

While reading the Native SSO draft, I stumbled on the following questions.
If you could clarify them, it would be helpful.

1) Device secret seems to be a token that is returned from the token
endpoint. Would it not be more appropriate to be called device_token or
something?
2) Is there any provision that assures the user of Native App 1 and Native
App 2 is the same?

Best,

Nat Sakimura
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20240208/c3a63a44/attachment.html>


More information about the Openid-specs-ab mailing list