oauth-v2-1

oauth-v2-1 copied to clipboard

Much of Vittorio's feedback in the native apps section stems from the differences in practice of mobile apps and desktop apps.

Should these recommendations be scoped to mobile apps now that we have more deployment experience since the Native Apps BCP was written? Do we all agree that the native apps recommendations are still valid?

This was discussed at IETF 116 and I believe the resolution was to ensure the language is in fact scoped to mobile apps, not desktop apps:

https://datatracker.ietf.org/doc/minutes-116-oauth-202303310030/#differences-between-mobile-and-desktop-apps