2May
In Oauth what is the benefit of the access token being opaque
Why was the decision taken that the Client doesn’t need to be able to parse the access token?
It seems to me that if the token included, in addition to the current fields, a client_id and a user_id, it would make life much simpler, prevent…
