This group is for discussion of the Web Resource Authorization Protocol (WRAP) profiles in OAuth, aka OAuth WRAP. While similar in pattern to OAuth 1.0A, the WRAP profiles have a number of important capabilities that were not available previously in OAuth. This specification is being contributed to the IETF OAuth WG which has a mailing list at https://www.ietf.org/mailman/listinfo/oauth.

Feel free to ask questions and suggestion documentation changes on the mailing list. Protocol changes should be discussed on the IETF list.

This group also has the Simple Web Token (SWT) specification which defines an Access Token that can be used in WRAP.

Reading the spec

The latest version of the spec is 0.9.7.2.

Implementations

As of December 2009, Facebook has been working on implementing OAuth in the FriendFeed project. Relevant content and resources:

• OAuth WRAP support in FriendFeed for feedback - Bret Taylor
• Implementing the New OAuth WRAP - Facebook Developers Blog
• Google AppEngine example application (Source code on GitHub)
• OAuth WRAP in Javascript by Luke Shepard (Source code on GitHub)