{"action":"created","issue":{"url":"https://api.github.com/repos/hadley/httr/issues/260","labels_url":"https://api.github.com/repos/hadley/httr/issues/260/labels{/name}","comments_url":"https://api.github.com/repos/hadley/httr/issues/260/comments","events_url":"https://api.github.com/repos/hadley/httr/issues/260/events","html_url":"https://github.com/hadley/httr/pull/260","id":92466048,"number":260,"title":"Add support for OAuth 2.0 implicit grant flow","user":{"login":"kippandrew","id":395128,"avatar_url":"https://avatars.githubusercontent.com/u/395128?v=3","gravatar_id":"","url":"https://api.github.com/users/kippandrew","html_url":"https://github.com/kippandrew","followers_url":"https://api.github.com/users/kippandrew/followers","following_url":"https://api.github.com/users/kippandrew/following{/other_user}","gists_url":"https://api.github.com/users/kippandrew/gists{/gist_id}","starred_url":"https://api.github.com/users/kippandrew/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kippandrew/subscriptions","organizations_url":"https://api.github.com/users/kippandrew/orgs","repos_url":"https://api.github.com/users/kippandrew/repos","events_url":"https://api.github.com/users/kippandrew/events{/privacy}","received_events_url":"https://api.github.com/users/kippandrew/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":8,"created_at":"2015-07-01T19:26:07Z","updated_at":"2016-01-08T20:52:33Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/hadley/httr/pulls/260","html_url":"https://github.com/hadley/httr/pull/260","diff_url":"https://github.com/hadley/httr/pull/260.diff","patch_url":"https://github.com/hadley/httr/pull/260.patch"},"body":"The implicit flow (outlined https://tools.ietf.org/html/rfc6749#section-1.3.2) is oauth2 grant that is used for public (e.g. non-confidential clients). This type of client is typically browser based (javascript) applications where the client can not maintain confidentiality. However, this flow may also be useful for applications such as publicly disturbed R packages. \r\n\r\nThe implicit flow is less secure then the authorization code flow (see http://tools.ietf.org/html/rfc6749#section-10.16). Also, not all providers implement this type of grant. One important note is that implicit flows do not issue refresh tokens."},"comment":{"url":"https://api.github.com/repos/hadley/httr/issues/comments/170120697","html_url":"https://github.com/hadley/httr/pull/260#issuecomment-170120697","issue_url":"https://api.github.com/repos/hadley/httr/issues/260","id":170120697,"user":{"login":"kippandrew","id":395128,"avatar_url":"https://avatars.githubusercontent.com/u/395128?v=3","gravatar_id":"","url":"https://api.github.com/users/kippandrew","html_url":"https://github.com/kippandrew","followers_url":"https://api.github.com/users/kippandrew/followers","following_url":"https://api.github.com/users/kippandrew/following{/other_user}","gists_url":"https://api.github.com/users/kippandrew/gists{/gist_id}","starred_url":"https://api.github.com/users/kippandrew/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kippandrew/subscriptions","organizations_url":"https://api.github.com/users/kippandrew/orgs","repos_url":"https://api.github.com/users/kippandrew/repos","events_url":"https://api.github.com/users/kippandrew/events{/privacy}","received_events_url":"https://api.github.com/users/kippandrew/received_events","type":"User","site_admin":false},"created_at":"2016-01-08T20:52:33Z","updated_at":"2016-01-08T20:52:33Z","body":"No need to wait on this. Not sure I have the bandwidth to look at this at\nthe moment.\n\nOn Fri, Jan 8, 2016 at 3:12 PM, Hadley Wickham <notifications@github.com>\nwrote:\n\n> Do you still want to get this in? I'm aiming to release early next week,\n> but I can hold back if you think this is important.\n>\n> —\n> Reply to this email directly or view it on GitHub\n> <https://github.com/hadley/httr/pull/260#issuecomment-170111063>.\n>\n"}}