[Openid-specs-ab] Messages - 3.1.2 additional display parameter options

Marius Scurtescu mscurtescu at google.com
Wed Oct 19 19:10:14 UTC 2011


Not sure if this came up already, but you probably want to add one
more option: embedded

This is for native applications that use an embedded browser. Since
embedded browsers use a separate cookie jar certain UI elements like
"Remember me" checkboxes don't make sense.

Marius



On Wed, Oct 19, 2011 at 12:00 PM, George Fletcher <gffletch at aol.com> wrote:
> Per my action item Monday from ... here is a possible write up for
> additional options for the display parameter. Currently OpenID Connect
> defines one value 'none' which means that the request MUST be handled
> without showing any UI to the user.  Facebook defines (page, iframe, popup,
> touch, wap) some of which are also in the OpenID UI Extension. I'm not sure
> we want to support iframe so I didn't include it in the list below.
>
> page
>     The Authorization Server SHOULD display authentication and consent UI
> consistent with a full browser page view. If the display parameter is not
> specified this is the default display mode.
>
> popup
>     The Authorization Server SHOULD display authentication and consent UI
> consistent with a popup browser window. The popup browser window SHOULD
> conform to N x N pixels.
>
> touch
>     The Authorization Server SHOULD display authentication and consent UI
> consistent with a device that leverages a touch interface. The Authorization
> Server MAY attempt to detect the device touch and further customize the
> interface.
>
> wap
>     The Authorization Server SHOULD display authentication and consent UI
> consistent with a "feature phone" type display.
>
> Note that the semantics are slightly different as these values are more
> hints from the client where as 'none' is a "command". Would it make sense to
> move the 'none' feature of display to the 'prompt' parameter? It seems to me
> that the semantics fit better. The main point of 'none' is that we don't
> want to ask the user any questions. The fact that no UI is displayed is a
> side effect of not asking the user for any input.
>
> Thanks,
> George
>
>
> _______________________________________________
> Openid-specs-ab mailing list
> Openid-specs-ab at lists.openid.net
> http://lists.openid.net/mailman/listinfo/openid-specs-ab
>
>


More information about the Openid-specs-ab mailing list