<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Yes I didn't see any discussion on that before the change.<div><br></div><div>It is unclear if you can define a new client type, it is not a real parameter.</div><div><br></div><div>Perhaps it is enough to say that any client asking for code token is hybrid and needs to be treated appropriately. Though that section seems to make having a separate client_id for each component mandatory.</div><div><br></div><div><br></div><div><br></div><div><br><div><div>On 2012-03-14, at 7:02 AM, Nat Sakimura wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><span style="">I only noticed now that rev 23 had a breaking change. it seems to</span><br style=""><span style="">doesn't allow the response_type=code token unless we define another client type such as "hybrid". </span><div>
<br></div><div>This is a breaking change. <br style=""><br>I wonder why I did not notice it till now. </div><div><br style=""><span style="">See below.</span><br style=""><br style=""><span style="">From section 2.1of</span><br style=""><a href="http://tools.ietf.org/rfcdiff?difftype=--hwdiff&url2=draft-ietf-oauth-v2-23.txt" target="_blank" style="">http://tools.ietf.org/rfcdiff?difftype=--hwdiff&url2=draft-ietf-oauth-v2-23.txt</a><br style="">
<br style=""><span style="">"A client application consisting of multiple components, each with its</span><br style=""><span style="">own client type (e.g. a distributed client with both a confidential</span><br style=""><span style="">server-based component and a public browser-based component), <b>MUST</b></span><br style="">
<span style="">register each component separately as a different client to ensure</span><br style=""><span style="">proper handling by the authorization server."</span><br style=""><br style=""><span style="">Discuss.</span> <br clear="all">
<div><br></div>-- <br>Nat Sakimura (=nat)<div>Chairman, OpenID Foundation<br><a href="http://nat.sakimura.org/" target="_blank">http://nat.sakimura.org/</a><br>@_nat_en</div><br>
</div>
_______________________________________________<br>Openid-specs-ab mailing list<br><a href="mailto:Openid-specs-ab@lists.openid.net">Openid-specs-ab@lists.openid.net</a><br>http://lists.openid.net/mailman/listinfo/openid-specs-ab<br></blockquote></div><br></div></body></html>