Comment on OAuth 2.0 finalizedparentComments−nailer13yOAuth 1 was a behemoth. OAuth 2 is simple.1. Get a login URL. Send people here to log in.2. Receive an auth token if the user clicked allow on the login page3. Swap the auth token for access and renewal tokens.Optional 4: Maybe renew if you expire.−Torn13ySo is the following critique out of date? http://hueniverse.com/2012/07/oauth-2-0-and-the-road-to-hell...−_ikke_13yThere are several flows possible with OAuth2. This is only one of them. So his critique is based on the total of OAuth2, not this small part that is fairly simple.−rauar13yProbably not (based on the time between the critique and the release)
Comments
OAuth 1 was a behemoth. OAuth 2 is simple.
1. Get a login URL. Send people here to log in.
2. Receive an auth token if the user clicked allow on the login page
3. Swap the auth token for access and renewal tokens.
Optional 4: Maybe renew if you expire.
So is the following critique out of date? http://hueniverse.com/2012/07/oauth-2-0-and-the-road-to-hell...
There are several flows possible with OAuth2. This is only one of them. So his critique is based on the total of OAuth2, not this small part that is fairly simple.
Probably not (based on the time between the critique and the release)