_raz
Joined 7 years ago
Karma
62
Submissions
32
Member since
Jul 31
Joined 7 years ago
Regurgitating the OAuth draft don't seem that usefull imho, and why am I forced into it if I'm using http. Seems like there are plenty of usecases where un-attended thing would like to interact over http, where we usually use other things aside from OAuth.
It all probably could have been replaced by
- The Client shall implement OAuth2 - The Server may implement OAuth2
From reading your issue, I'm not holding my breath.
It all kind of seems too important to fuck up
Kind of reminds me of the browser wars during 90s where everyone tried to run the fastest an created splits in standards and browsers what we didn't really det rid of for a good 20 year or more. IE11 was around for far to long
https://x.com/opencode/status/2082264221887111444