Hacker News new | ask | show | jobs
by mooreds 948 days ago
Fair! I considered "OAuth 2.0 rolled up with all the specs since 2.0" an update, but you are correct. They specifically didn't want to set out any new features in OAuth 2.1.

From the spec:

"This Standards Track specification consolidates the information in all of these documents and removes features that have been found to be insecure..."