4 ms·
> My opinion is that OAuth 2.0 is a very bad spec because in practice people do not implement it correctly. Can we just stop using oauth entirely, then? There'
by lylejantzi3rd 3y ago
> My opinion is that OAuth 2.0 is a very bad spec because in practice people do not implement it correctly.
Can we just stop using oauth entirely, then? There's got to be something better.
- paulddraper 3y agoOauth 2.1 > Keep in mind that when OAuth 2.0 was published in 2012, the iPhone 5 was brand new, the latest browser from Microsoft was Internet Explorer 9, single-page apps were called “AJAX apps”, and CORS was not yet an established W3C standard.