Re:OAuth 3
by spiderfarmer on Thursday October 22, 2020 @06:15AM
(#24856478)
I think it's called XYZ until it's ready to be called Oauth 3.
It's called GNAP: https://datatracker.ietf.org/wg/gnap/documents/
The "Grant Negotiation and Authorization Protocol"
Re:OAuth 3
by valera_rozuvan on Thursday October 22, 2020 @07:38AM
(#24856954)
As Justin Richer writes [1]:
And to be clear, I don’t actually care if the new work is called OAuth 3.0 or TxAuth or some other name, but I do think that it’s a fitting change set for a major revision of a powerful and successful protocol. We need something new, while we patch what we have, and now’s the time to build it. Come join the conversation in TxAuth, play with XYZ, and let’s start building the future.
--------------------
[1] https://medium.com/@justinsecurity/the-case-for-oauth-3-0-5c...
Same here.
If anyone from the workgroup is reading this: please clarify in the first paragraph that XYZ is like a 'working title' for OAuth 3.
In either case, I am excited about it, I do hope it will be easier to use as well.