OpenID-Connect-Java-Spring-Server

History

Amanda Anganes 73b94cb125 Some references to "Consumer" rather than "Client" were still present; these have been fixed.		2012-02-07 12:09:18 -05:00
..
OAuth2.0_Diagrams.pdf	Some references to "Consumer" rather than "Client" were still present; these have been fixed.	2012-02-07 12:09:18 -05:00
OpenID_Connect_Diagrams.pdf	Some references to "Consumer" rather than "Client" were still present; these have been fixed.	2012-02-07 12:09:18 -05:00
readme.txt	Added a "readme.txt" to the docs folder to capture changelog.	2012-02-07 10:00:56 -05:00

readme.txt

Changelog

Updated on 2/7/2012

OAuth2:
* Removed refresh_token from the Access Token response on the Client Credentials flow. 	
	Ref: http://tools.ietf.org/html/draft-ietf-oauth-v2-23#section-4.4.3 
	"A refresh token SHOULD NOT be included."

* Changed "Consumer" to "Client".

Connect:
* Changed "Consumer" to "Client". 

* Clarified required/optional wording. Parameters are REQUIRED unless otherwise stated.

* Implicit Flow: changed wording on redirect_uri requirement in the Authorization Request. Now reads "required IFF the client has pre-configured more than one value with the service provider". 

* Diagram 3 was renamed to "Optional Steps" (from "Additional Steps"), as these steps may or may not be taken and may be done in any order. Added "openid" to the schema parameter in the UserInfo Request.