Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enforcing modification of a request #92

Closed
jricher opened this issue Nov 13, 2020 · 2 comments · Fixed by #427
Closed

Enforcing modification of a request #92

jricher opened this issue Nov 13, 2020 · 2 comments · Fixed by #427
Assignees

Comments

@jricher
Copy link
Collaborator

jricher commented Nov 13, 2020

§5.2 Modifying an Existing Request: Editor's note:

We could state something like "resources and subject MUST NOT be the same as in the initial or previous request" to enforce that this really is a change, but is there value in calling that out here? Somehow we do probably want to tell the AS to not let a client simply post the same request here to rotate access tokens now that we've got an explicit function for that, right?

@jricher jricher self-assigned this Jan 31, 2022
@jricher
Copy link
Collaborator Author

jricher commented Feb 9, 2022

I don't think it's a meaningful distinction to make from the client's perspective; suggest adding additional text about differentiating between grant PATCH and access token rotation (new token vs. rotated token) and close in favor of #353

@fimbault
Copy link
Collaborator

I think we can close this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants