FEP-61cf: The OpenWebAuth Protocol

[erlend_sh]

This may also be related to

FEP-d8c2: OAuth 2.0 Profile for the ActivityPub API

I fundamentally disagree with this FEP, and think it takes a very “not invented here” approach. Using standards that already exist should be preferable unless there’s a specific reason or value to deviate; Here in this FEP we stand to loose a lot of functionality of OAuth 2.0, and don’t particularly gain anything (besides not having to do Dynamic Client Registration) — but DCR is valuable in other ways. OAuth 2.0/2.1 is a well defined standard, maintained by the IETF, I don’t think we should be…