Subject: Re: [OAUTH-WG] Question regarding draft-hunt-oauth-v2-user-a4c

From: Justin Richer <[email-masked]>
Date: Thu, 05 Jun 2014 15:46:14 -0400

No, it's great exactly *because* you can represent things in the access token that make sense for your app/domain and it stays opaque to the parties who shouldn't care: the clients. Access tokens aren't opaque to the AS (or PR), because of OAuth's flexibility of token formats you can use what works.

--Justin
/sent from my phone/

Anthony Nadalin <[email-masked]> wrote:

>_______________________________________________
>OAuth mailing list
>[email-masked]
>https://www.ietf.org/mailman/listinfo/oauth