[Openid-specs-ab] Lite Draft 8
allentomdude at gmail.com
Thu Aug 18 01:14:58 UTC 2011
The scopes that the client is asking for could be bound to the client_id.
This assumes that the RP pre-registered with the OP.
That being said, I think it's probably easier for client developers if
they're able to dynamically specify the scopes that they want.
On Wed, Aug 17, 2011 at 5:19 PM, John Bradley <ve7jtb at ve7jtb.com> wrote:
> Yes but the question is how you ask for authorization.
> If there is only one scope then you can't ask for a subset. At least
> Facebook dosen't want to give email by default.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Openid-specs-ab