[PROPOSAL] bare response / bare request

Recordon, David drecordon at verisign.com
Sun Oct 1 07:38:40 UTC 2006


I'm confused, can you explain this again please?

--David


-----Original Message-----
From: specs-bounces at openid.net on behalf of Dick Hardt
Sent: Sat 9/30/2006 5:09 PM
To: specs at openid.net
Subject: [PROPOSAL] bare response / bare request
 
Motivating Use Case
----------------------------
The IdP would like to allow the user to click a link on the IdP to  
login to an RP. This requires a bare response to be able to be sent.
A Trusted Party, acting as an RP would like to store a value at the  
IdP, but does not need the IdP to send the user back, a bare request  
is needed.


Proposed Implementation
-----------------------------------
bare request: if the openid.return_to parameter is missing or blank,  
then the IdP will not send the user back to the RP

bare response: sending a bare response is valid (not sure we need to  
do anything more then say it is OK to do)
_______________________________________________
specs mailing list
specs at openid.net
http://openid.net/mailman/listinfo/specs


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs/attachments/20061001/7e35e00f/attachment-0002.htm>


More information about the specs mailing list