{"action":"created","issue":{"url":"https://api.github.com/repos/loadsys/CakePHP-Stateless-Auth/issues/12","labels_url":"https://api.github.com/repos/loadsys/CakePHP-Stateless-Auth/issues/12/labels{/name}","comments_url":"https://api.github.com/repos/loadsys/CakePHP-Stateless-Auth/issues/12/comments","events_url":"https://api.github.com/repos/loadsys/CakePHP-Stateless-Auth/issues/12/events","html_url":"https://github.com/loadsys/CakePHP-Stateless-Auth/issues/12","id":62756942,"number":12,"title":"This Plugin is Built Around Ember Simple Auth - via the OAuth 2 Authenticator, Shouldn't We Make the TokenLoginLogoutAuthenticate More Closely Match the OAuth 2 Spec?","user":{"login":"jtyost2","id":85320,"avatar_url":"https://avatars.githubusercontent.com/u/85320?v=3","gravatar_id":"","url":"https://api.github.com/users/jtyost2","html_url":"https://github.com/jtyost2","followers_url":"https://api.github.com/users/jtyost2/followers","following_url":"https://api.github.com/users/jtyost2/following{/other_user}","gists_url":"https://api.github.com/users/jtyost2/gists{/gist_id}","starred_url":"https://api.github.com/users/jtyost2/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jtyost2/subscriptions","organizations_url":"https://api.github.com/users/jtyost2/orgs","repos_url":"https://api.github.com/users/jtyost2/repos","events_url":"https://api.github.com/users/jtyost2/events{/privacy}","received_events_url":"https://api.github.com/users/jtyost2/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/loadsys/CakePHP-Stateless-Auth/labels/question","name":"question","color":"cc317c"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-03-18T17:52:46Z","updated_at":"2015-03-18T17:53:36Z","closed_at":null,"body":"I recognize this is a large task and maybe this is the argument for not publishing the plugin, given we are basically implementing part of a standard without all of it in place.\r\n\r\nI'm not even really arguing for this to support all features of OAuth 2 or even consider it 100% compatible, but the use for this in FM is a OAuth 2 style flow - so shouldn't we at least get closer to the OAuth 2 spec?\r\n\r\nKeeping in mind there are a lot of packages out there now that do OAuth servers in PHP: http://oauth.net/2/#implementations\r\n\r\nReference to Ember Simple Auth: https://github.com/simplabs/ember-simple-auth\r\nRef to Ember Simple Auth OAuth 2: https://github.com/simplabs/ember-simple-auth/tree/master/packages/ember-simple-auth-oauth2\r\nRef to OAuth 2 Spec: http://oauth.net/2/"},"comment":{"url":"https://api.github.com/repos/loadsys/CakePHP-Stateless-Auth/issues/comments/83092977","html_url":"https://github.com/loadsys/CakePHP-Stateless-Auth/issues/12#issuecomment-83092977","issue_url":"https://api.github.com/repos/loadsys/CakePHP-Stateless-Auth/issues/12","id":83092977,"user":{"login":"jtyost2","id":85320,"avatar_url":"https://avatars.githubusercontent.com/u/85320?v=3","gravatar_id":"","url":"https://api.github.com/users/jtyost2","html_url":"https://github.com/jtyost2","followers_url":"https://api.github.com/users/jtyost2/followers","following_url":"https://api.github.com/users/jtyost2/following{/other_user}","gists_url":"https://api.github.com/users/jtyost2/gists{/gist_id}","starred_url":"https://api.github.com/users/jtyost2/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jtyost2/subscriptions","organizations_url":"https://api.github.com/users/jtyost2/orgs","repos_url":"https://api.github.com/users/jtyost2/repos","events_url":"https://api.github.com/users/jtyost2/events{/privacy}","received_events_url":"https://api.github.com/users/jtyost2/received_events","type":"User","site_admin":false},"created_at":"2015-03-18T17:53:36Z","updated_at":"2015-03-18T17:53:36Z","body":"It seems like TokenAuthenticate doesn't really have a flow for matching the spec, given that there is no login/logout flow, so that's exempt from my point about OAuth 2."}}