OAuth BoF

IETF 74

draft-hammer-oauth-01

• Introduction / Expectations• Use cases• Document structure• Terminology• Examples

Interoperability

• No required Signature Method• 3 Parameter methods• Endpoints HTTP methods• Documentation / Discovery• Client registration• Error codes

Security

• Signature scope• Secrets in the clear• DoS Attacks• Callbacks

New Features

• Alternative Token methods• Body hash• Language preference