Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Authorisation vs Authorization #43

Open
JKhandelwal opened this issue Apr 4, 2018 · 3 comments
Open

Authorisation vs Authorization #43

JKhandelwal opened this issue Apr 4, 2018 · 3 comments
Labels

Comments

@JKhandelwal
Copy link

In the protocol spec BE02.md, the authorisation header is listed as:
Authorisation
https://github.com/CS3099JH2017/cs3099jh/blob/master/protocols/BE02.md#oauth
But I believe the OAuth Standard defines the protocol to use the term:
Authorization
Which appears to be the accepted standard, furthermore, for anyone using Swagger Servers, the header is defined, at least in testing, as Authorization, so could the protocol potentially be changed to use the term:
Authorization

@magnostherobot
Copy link
Member

magnostherobot commented Apr 4, 2018

This is really something that should have been addressed before the creation of Protocol BE01, however because BE01.md's license (and, by necessity, BE02.md's too) states that functional changes are disallowed, it cannot go into either of those files. If people want to change to using the American-english spelling, it should go in a separate mini-protocol.

Ideally in my mind, systems should support both spellings - supporting both doesn't really produce ambiguity.

@JKhandelwal
Copy link
Author

Would it be assumed that the backend groups would also be supporting both spellings then?

@magnostherobot
Copy link
Member

magnostherobot commented Apr 4, 2018

I've created PR #44 for a new Protocol BE70, which enforces the support for Authorization in addition to Authorisation headers on devices that require authorisation.

Would it be assumed that the backend groups would also be supporting both spellings then?

Authorisation providers can check that an authorisation requester supports Authorization by checking for support of Protocol BE70 through use of the _supported_protocols_ endpoint. All requesters will support Authorisation.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants