Re: [OAUTH-WG] Reevaluating Assumptions (Important!)

[Eran Hammer-Lahav <eran at hueniverse.com>]

Can you describe the actual use case?

EHL

> -----Original Message-----
> From: oauth-bounces at ietf.org [mailto:oauth-bounces at ietf.org] On Behalf
> Of Brian Eaton
> Sent: Thursday, October 01, 2009 9:01 PM
> To: George Fletcher
> Cc: oauth at ietf.org
> Subject: Re: [OAUTH-WG] Reevaluating Assumptions (Important!)
> 
> On Thu, Oct 1, 2009 at 7:52 PM, George Fletcher <gffletch at aol.com>
> wrote:
> > One use case (I think I saw it mentioned somewhere else on the list)
> where
> > we've used the URI parameters is when we want the server to sign a
> URL and
> > then pass that signed value to the browser to load. This can be done
> with a
> > simple 302 and the signed URL. Switching to just supporting the
> > Authorization header will make this more difficult but probably not
> > impossible.
> 
> Yep.  I've seen that done multiple places.
> 
> One more unexpected use of OAuth...
> _______________________________________________
> OAuth mailing list
> OAuth at ietf.org
> https://www.ietf.org/mailman/listinfo/oauth