You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In section "5.2. Unauthenticated Requests" you give an example how a protected resource may respond to an unauthenticated request by
setting the WWW-Authenticate response header field with Thomas Broyer's Cookie auth scheme and
setting an HTML login form as the response body content.
To me it would seem more appropriate to give an example where the response contains a redirect to the authorization endpoint using the response_mode=cookie that this spec defines.
Hi @jaredhanson
This is about https://datatracker.ietf.org/doc/draft-hanson-oauth-cookie-response-mode/ (which apparently is a more recent version of the document in this repo).
In section "5.2. Unauthenticated Requests" you give an example how a protected resource may respond to an unauthenticated request by
WWW-Authenticate
response header field with Thomas Broyer'sCookie
auth scheme andTo me it would seem more appropriate to give an example where the response contains a redirect to the authorization endpoint using the
response_mode=cookie
that this spec defines.See also aaronpk/draft-hanson-oauth-cookie-response-mode#2
The text was updated successfully, but these errors were encountered: